Inconsistencies between Landlock and non-landlock mode #19

创建工单

crtxcr · 2021-10-26T22:28:47+02:00

crtxcr 评论于

2021-10-26 22:28:47 +02:00

管理员

Code written under the assumption breaks when compiled on landlock-enabled systems.

qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE)

generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc.

On landlock, this behaviour changes.

So, we may need to simply implicitly add the necessary flags.

Code written under the assumption breaks when compiled on landlock-enabled systems. qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE) generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc. On landlock, this behaviour changes. So, we may need to simply implicitly add the necessary flags.

crtxcr 于 2021-10-26 22:28:47 +02:00 添加了标签

bug

crtxcr 于

2021-12-27 00:44:43 +01:00

在代码提交中引用了该工单

Add EXILE_FS_ALLOW_ALL_{READ,WRITE}

登录并参与到对话中。