[RFC PATCH v3 19/19] landlock: Document socket rule type support
Günther Noack
gnoack at google.com
Thu Oct 3 16:21:01 UTC 2024
On Thu, Oct 03, 2024 at 05:00:14PM +0300, Mikhail Ivanov wrote:
> On 10/1/2024 10:09 AM, Günther Noack wrote:
> > IMHO, the length of the "Defining and enforcing a security policy" section is
> > slowly getting out of hand. This was easier to follow when it was only file
> > system rules. -- I wonder whether we should split this up in subsections for the
> > individual steps to give this a more logical outline, e.g.
> >
> > * Creating a ruleset
> > * Adding rules to the ruleset
> > * Adding a file system rule
> > * Adding a network rule
> > * Adding a socket rule
> > * Enforcing the ruleset
>
> I agree, it's important to keep usage usage description as simple as it
> possible. Should I include related commit in current patchset?
Sure, sounds good to me. 👍
—Günther
More information about the Linux-security-module-archive
mailing list