Inconsistencies between Landlock and non-landlock mode #19

新增問題

crtxcr · 2021-10-26T22:28:47+02:00

crtxcr 已留言

2021-10-26 22:28:47 +02:00

擁有者

Code written under the assumption breaks when compiled on landlock-enabled systems.

qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE)

generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc.

On landlock, this behaviour changes.

So, we may need to simply implicitly add the necessary flags.

Code written under the assumption breaks when compiled on landlock-enabled systems. qssb_append_path_policy(policy, QSSB_FS_ALLOW_READ | QSSB_FS_ALLOW_WRITE) generall assumes natural behaviour, such as delete being allowed, or the creation of sockets etc. On landlock, this behaviour changes. So, we may need to simply implicitly add the necessary flags.

crtxcr 加入了

bug

標籤 2021-10-26 22:28:47 +02:00

crtxcr 在提交中關聯了這個問題

2021-12-27 00:44:43 +01:00

Add EXILE_FS_ALLOW_ALL_{READ,WRITE}

登入才能加入這對話。

1 參與者

通知

截止日期

未設定截止日期。

先決條件

未設定先決條件。

參考: crtxcr/exile.h#19