Inconsistencies between Landlock and non-landlock mode #19

Jauna problēma

crtxcr · 2021-10-26T22:28:47+02:00

crtxcr komentēja

2021-10-26 22:28:47 +02:00

Īpašnieks

Code written under the assumption breaks when compiled on landlock-enabled systems.

qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE)

generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc.

On landlock, this behaviour changes.

So, we may need to simply implicitly add the necessary flags.

Code written under the assumption breaks when compiled on landlock-enabled systems. qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE) generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc. On landlock, this behaviour changes. So, we may need to simply implicitly add the necessary flags.

crtxcr pievienoja

bug

etiķeti 2021-10-26 22:28:47 +02:00

crtxcr pieminēja šo problēmu revīzijā

2021-12-27 00:44:43 +01:00

Add EXILE_FS_ALLOW_ALL_{READ,WRITE}

Nepieciešams pieteikties, lai pievienotos šai sarunai.