[PATCH v2] landlock: Explain how to support Landlock

Mickaël Salaün mic at digikod.net
Fri May 13 14:30:12 UTC 2022


On 13/05/2022 14:57, Paul Moore wrote:
> On Fri, May 13, 2022 at 7:27 AM Mickaël Salaün <mic at digikod.net> wrote:
>>
>> Let's help users by documenting how to enable and check for Landlock in
>> the kernel and the running system.  The userspace-api section may not be
>> the best place for this but it still makes sense to put all the user
>> documentation at the same place.
>>
>> Cc: Paul Moore <paul at paul-moore.com>
>> Signed-off-by: Mickaël Salaün <mic at digikod.net>
>> Link: https://lore.kernel.org/r/20220513112743.156414-1-mic@digikod.net
>> ---
>>
>> Changes since v1:
>> * Move the checking subsection at the beginning (suggested by Paul
>>    Moore) and merge the two configuration subsections.
>> * Use both dmesg and journalctl to handle cases where journald is not
>>    installed or when the kernel log buffer is full.
>> * Add reference to the syscall check (ABI section).
>> * Improve explanations.
>> * Update copyright date.
>> ---
>>   Documentation/userspace-api/landlock.rst | 29 +++++++++++++++++++++++-
>>   1 file changed, 28 insertions(+), 1 deletion(-)
> 
> Looks good to me.
> 
> Reviewed-by: Paul Moore <paul at paul-moore.com>
> 

Thanks Paul!



More information about the Linux-security-module-archive mailing list