Inconsistencies between Landlock and non-landlock mode #19

Nový úkol

crtxcr · 2021-10-26T22:28:47+02:00

crtxcr okomentoval

2021-10-26 22:28:47 +02:00

Vlastník

Code written under the assumption breaks when compiled on landlock-enabled systems.

qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE)

generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc.

On landlock, this behaviour changes.

So, we may need to simply implicitly add the necessary flags.

Code written under the assumption breaks when compiled on landlock-enabled systems. qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE) generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc. On landlock, this behaviour changes. So, we may need to simply implicitly add the necessary flags.

crtxcr přidal/a

bug

štítek 2021-10-26 22:28:47 +02:00

crtxcr odkázal na tento úkol z commitu

2021-12-27 00:44:43 +01:00

Add EXILE_FS_ALLOW_ALL_{READ,WRITE}

Přihlaste se pro zapojení do konverzace.

1 účastníků

Oznámení

Termín dokončení

Žádný termín dokončení.

Závislosti

Nejsou nastaveny žádné závislosti.

Reference: crtxcr/exile.h#19