Inconsistencies between Landlock and non-landlock mode #19

建立問題

crtxcr · 2021-10-26T22:28:47+02:00

crtxcr " 評論

2021-10-26 22:28:47 +02:00

"

管理員

Code written under the assumption breaks when compiled on landlock-enabled systems.

qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE)

generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc.

On landlock, this behaviour changes.

So, we may need to simply implicitly add the necessary flags.

Code written under the assumption breaks when compiled on landlock-enabled systems. qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE) generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc. On landlock, this behaviour changes. So, we may need to simply implicitly add the necessary flags.

crtxcr added the

bug

label 2021-10-26 22:28:47 +02:00

crtxcr 在代碼提交

2021-12-27 00:44:43 +01:00

中引用了該問題

Add EXILE_FS_ALLOW_ALL_{READ,WRITE}

登入才能加入這對話。