root/xz
1
0
Fork 0
mirror of https://git.tukaani.org/xz.git synced 2026-10-31 03:14:56 +00:00
Code Issues Releases Wiki Activity

Landlock: Support ABI version 9

Browse Source 
Features added in versions 7 and 8 shouldn't be relevant here.
This commit is contained in:
Lasse Collin 2026-05-21 18:57:36 +03:00
parent f5665a445f
commit 8654b72980
No known key found for this signature in database
GPG Key ID: 38EE757D69184620
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/common/my_landlock.h
View File

@ -26,7 +26,7 @@
// In case we are being compiled against an old <linux/landlock.h>,
// provide fallbacks for handled_access_fs flags that were added in
// Landlock ABI versions 2, 3, and 5. This way we need fewer #ifdefs
// Landlock ABI versions 2, 3, 5, and 9. This way we need fewer #ifdefs
// later on and, more importantly, these flags are then supported if
// the program is run under a kernel that supports a newer Landlock ABI
// than the current <linux/landlock.h>.
@ -42,6 +42,9 @@
#ifndef LANDLOCK_ACCESS_FS_IOCTL_DEV
# define LANDLOCK_ACCESS_FS_IOCTL_DEV (1ULL << 15)
#endif
#ifndef LANDLOCK_ACCESS_FS_RESOLVE_UNIX
# define LANDLOCK_ACCESS_FS_RESOLVE_UNIX (1ULL << 16)
#endif
/// \brief Initialize Landlock ruleset attributes to forbid everything
@ -110,6 +113,7 @@ my_landlock_ruleset_attr_forbid_all(struct landlock_ruleset_attr *attr)
| LANDLOCK_ACCESS_FS_REFER // ABI 2
| LANDLOCK_ACCESS_FS_TRUNCATE // ABI 3
| LANDLOCK_ACCESS_FS_IOCTL_DEV // ABI 5
| LANDLOCK_ACCESS_FS_RESOLVE_UNIX // ABI 9
;
#ifdef LANDLOCK_ACCESS_NET_BIND_TCP
@ -160,6 +164,11 @@ my_landlock_ruleset_attr_forbid_all(struct landlock_ruleset_attr *attr)
FALLTHROUGH;
case 7:
case 8:
attr->handled_access_fs &= ~LANDLOCK_ACCESS_FS_RESOLVE_UNIX;
FALLTHROUGH;
default:
// We only know about the features of the ABIs 1-6.
break;