Inconsistencies between Landlock and non-landlock mode #19

Nova issue

crtxcr · 2021-10-26T22:28:47+02:00

crtxcr comentou

2021-10-26 22:28:47 +02:00

Proprietário

Code written under the assumption breaks when compiled on landlock-enabled systems.

qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE)

generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc.

On landlock, this behaviour changes.

So, we may need to simply implicitly add the necessary flags.

Code written under the assumption breaks when compiled on landlock-enabled systems. qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE) generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc. On landlock, this behaviour changes. So, we may need to simply implicitly add the necessary flags.

crtxcr adicionou o rótulo

bug

2021-10-26 22:28:47 +02:00

crtxcr citou esta issue em um commit

2021-12-27 00:44:43 +01:00

Add EXILE_FS_ALLOW_ALL_{READ,WRITE}

Acesse para participar desta conversação.

1 participante(s)

Notificações

Data limite

Data limite não informada.

Dependências

Nenhuma dependência definida.

Referência: crtxcr/exile.h#19