[RFC PATCH v3 19/19] landlock: Document socket rule type support

Günther Noack gnoack at google.com
Thu Oct 3 16:21:01 UTC 2024


On Thu, Oct 03, 2024 at 05:00:14PM +0300, Mikhail Ivanov wrote:
> On 10/1/2024 10:09 AM, Günther Noack wrote:
> > IMHO, the length of the "Defining and enforcing a security policy" section is
> > slowly getting out of hand.  This was easier to follow when it was only file
> > system rules. -- I wonder whether we should split this up in subsections for the
> > individual steps to give this a more logical outline, e.g.
> > 
> > * Creating a ruleset
> > * Adding rules to the ruleset
> >    * Adding a file system rule
> >    * Adding a network rule
> >    * Adding a socket rule
> > * Enforcing the ruleset
> 
> I agree, it's important to keep usage usage description as simple as it
> possible. Should I include related commit in current patchset?

Sure, sounds good to me. 👍

—Günther



More information about the Linux-security-module-archive mailing list