Inconsistencies between Landlock and non-landlock mode #19

Neues Issue

crtxcr · 2021-10-26T22:28:47+02:00

crtxcr hat

2021-10-26 22:28:47 +02:00

kommentiert

Besitzer

Code written under the assumption breaks when compiled on landlock-enabled systems.

qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE)

generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc.

On landlock, this behaviour changes.

So, we may need to simply implicitly add the necessary flags.

Code written under the assumption breaks when compiled on landlock-enabled systems. qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE) generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc. On landlock, this behaviour changes. So, we may need to simply implicitly add the necessary flags.

crtxcr hat das Label

bug

2021-10-26 22:28:47 +02:00 hinzugefügt

crtxcr hat dieses Issue

2021-12-27 00:44:43 +01:00

aus einem Commit referenziert

Add EXILE_FS_ALLOW_ALL_{READ,WRITE}

Anmelden, um an der Diskussion teilzunehmen.