Inconsistencies between Landlock and non-landlock mode #19

Новая задача

crtxcr · 2021-10-26T22:28:47+02:00

crtxcr прокомментировал(а)

2021-10-26 22:28:47 +02:00

Владелец

Code written under the assumption breaks when compiled on landlock-enabled systems.

qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE)

generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc.

On landlock, this behaviour changes.

So, we may need to simply implicitly add the necessary flags.

Code written under the assumption breaks when compiled on landlock-enabled systems. qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE) generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc. On landlock, this behaviour changes. So, we may need to simply implicitly add the necessary flags.

crtxcr добавил(а) метку

bug

2021-10-26 22:28:47 +02:00

crtxcr упомянул эту задачу в коммите

2021-12-27 00:44:43 +01:00

Add EXILE_FS_ALLOW_ALL_{READ,WRITE}

Войдите, чтобы присоединиться к обсуждению.