[RFC PATCH 08/10] landlock: Construct the inode hashtable in the new landlock_domain

[Mickaël Salaün]

On Wed, May 21, 2025 at 08:32:04PM +0100, Tingmao Wang wrote:
> Since we can't get rid of the old landlock_merge_ruleset yet, we call our
> new thing landlock_merge_ruleset2.
> 
> Signed-off-by: Tingmao Wang <m at maowtm.org>
> ---
>  security/landlock/domain.c   |  87 +++++++++++++++++++++++++++++
>  security/landlock/domain.h   |   4 ++
>  security/landlock/hash.h     | 105 +++++++++++++++++++++++++++++++++++
>  security/landlock/ruleset.h  |   2 +-
>  security/landlock/syscalls.c |   9 +++
>  5 files changed, 206 insertions(+), 1 deletion(-)


> diff --git a/security/landlock/ruleset.h b/security/landlock/ruleset.h
> index 07823771b402..ac91d4a865b9 100644
> --- a/security/landlock/ruleset.h
> +++ b/security/landlock/ruleset.h
> @@ -27,7 +27,7 @@ struct landlock_hierarchy;
>   */
>  struct landlock_layer {
>  	/**
> -	 * @level: Position of this layer in the layer stack.
> +	 * @level: Position of this layer in the layer stack. Starts from 1.

Feel free to send a standalone patch with improved doc, I'll merge it
directly.

>  	 */
>  	u16 level;
>  	/**