Inconsistencies between Landlock and non-landlock mode #19

Questão nova

crtxcr · 2021-10-26T22:28:47+02:00

crtxcr comentou

2021-10-26 22:28:47 +02:00

Proprietário(a)

Code written under the assumption breaks when compiled on landlock-enabled systems.

qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE)

generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc.

On landlock, this behaviour changes.

So, we may need to simply implicitly add the necessary flags.

Code written under the assumption breaks when compiled on landlock-enabled systems. qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE) generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc. On landlock, this behaviour changes. So, we may need to simply implicitly add the necessary flags.

crtxcr adicionou o rótulo

bug

2021-10-26 22:28:47 +02:00

crtxcr referenciou esta questão num cometimento

2021-12-27 00:44:43 +01:00

Add EXILE_FS_ALLOW_ALL_{READ,WRITE}

Inicie a sessão para participar neste diálogo.

1 Participantes

Notificações

Data de vencimento

Sem data de vencimento definida.

Dependências

Não estão definidas dependências.

Referência: crtxcr/exile.h#19