Inconsistencies between Landlock and non-landlock mode #19

Nouveau ticket

crtxcr · 2021-10-26T22:28:47+02:00

crtxcr a commenté

2021-10-26 22:28:47 +02:00

.

Propriétaire

Code written under the assumption breaks when compiled on landlock-enabled systems.

qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE)

generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc.

On landlock, this behaviour changes.

So, we may need to simply implicitly add the necessary flags.

Code written under the assumption breaks when compiled on landlock-enabled systems. qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE) generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc. On landlock, this behaviour changes. So, we may need to simply implicitly add the necessary flags.

crtxcr a ajouté le label

bug

2021-10-26 22:28:47 +02:00.

crtxcr a référencé ce ticket depuis une révision

2021-12-27 00:44:43 +01:00

.

Add EXILE_FS_ALLOW_ALL_{READ,WRITE}

Connectez-vous pour rejoindre cette conversation.