[RFC PATCH 08/10] landlock: Construct the inode hashtable in the new landlock_domain

Tingmao Wang m at maowtm.org
Mon Jun 2 13:20:50 UTC 2025


On 5/27/25 12:00, Mickaël Salaün wrote:
> On Wed, May 21, 2025 at 08:32:04PM +0100, Tingmao Wang wrote:
>> Since we can't get rid of the old landlock_merge_ruleset yet, we call our
>> new thing landlock_merge_ruleset2.
>>
>> Signed-off-by: Tingmao Wang <m at maowtm.org>
>> ---
>>  security/landlock/domain.c   |  87 +++++++++++++++++++++++++++++
>>  security/landlock/domain.h   |   4 ++
>>  security/landlock/hash.h     | 105 +++++++++++++++++++++++++++++++++++
>>  security/landlock/ruleset.h  |   2 +-
>>  security/landlock/syscalls.c |   9 +++
>>  5 files changed, 206 insertions(+), 1 deletion(-)
> 
> 
>> diff --git a/security/landlock/ruleset.h b/security/landlock/ruleset.h
>> index 07823771b402..ac91d4a865b9 100644
>> --- a/security/landlock/ruleset.h
>> +++ b/security/landlock/ruleset.h
>> @@ -27,7 +27,7 @@ struct landlock_hierarchy;
>>   */
>>  struct landlock_layer {
>>  	/**
>> -	 * @level: Position of this layer in the layer stack.
>> +	 * @level: Position of this layer in the layer stack. Starts from 1.
> 
> Feel free to send a standalone patch with improved doc, I'll merge it
> directly.

(I've done this and will remove this change from this series.)

> 
>>  	 */
>>  	u16 level;
>>  	/**




More information about the Linux-security-module-archive mailing list