Inconsistencies between Landlock and non-landlock mode #19

Nieuw probleem

crtxcr · 2021-10-26T22:28:47+02:00

crtxcr reageerde

2021-10-26 22:28:47 +02:00

Eigenaar

Code written under the assumption breaks when compiled on landlock-enabled systems.

qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE)

generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc.

On landlock, this behaviour changes.

So, we may need to simply implicitly add the necessary flags.

Code written under the assumption breaks when compiled on landlock-enabled systems. qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE) generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc. On landlock, this behaviour changes. So, we may need to simply implicitly add the necessary flags.

crtxcr voegde het

bug

label 2021-10-26 22:28:47 +02:00 toe

crtxcr verwees naar dit probleem vanuit commit 2021-12-27 00:44:43 +01:00'

Add EXILE_FS_ALLOW_ALL_{READ,WRITE}

Log in om deel te nemen aan deze discussie.

1 deelnemers

Notificaties

Vervaldatum

Geen vervaldatum ingesteld.

Afhankelijkheden

Geen afhankelijkheden ingesteld.

Referentie: crtxcr/exile.h#19