[PATCH v11 2/9] landlock: Add API support and docs for the quiet flags

[Günther Noack]

Hello Tingmao!

On Fri, Jun 12, 2026 at 02:48:48AM +0100, Tingmao Wang wrote:
> diff --git a/Documentation/userspace-api/landlock.rst b/Documentation/userspace-api/landlock.rst
> index 0ea55c2c732c..ce63ec564229 100644
> --- a/Documentation/userspace-api/landlock.rst
> +++ b/Documentation/userspace-api/landlock.rst
> @@ -775,6 +775,20 @@ remote port of UDP sockets (via :manpage:`connect(2)), and sending
>  datagrams to an explicit remote port (ignoring any destination set on
>  UDP sockets, via e.g. :manpage:`sendto(2)).
>  
> +Quiet rule flag (ABI < 10)
> +--------------------------
> +
> +Starting with the Landlock ABI version 10, it is possible to selectively
> +suppress logs for specific denied accesses on a per-object basis with
> +the ``LANDLOCK_ADD_RULE_QUIET`` flag of sys_landlock_add_rule(), in
> +combination with the ``quiet_access_fs`` and ``quiet_access_net`` fields
> +of struct landlock_ruleset_attr.  It is also now possible to suppress
> +logs for scope accesses via the ``quiet_scoped`` field of struct
> +landlock_ruleset_attr.  The object is marked as quiet within a ruleset
> +when at least one sys_landlock_add_rule() call is made for it with the
> +``LANDLOCK_ADD_RULE_QUIET`` flag, additional add-rule calls for the same
> +object without this flag do not clear it.
> +
>  .. _kernel_support:
>  
>  Kernel support

Friendly reminder -- could you please also transcribe the newly added
documentation into the Landlock man pages?  I added a tracking issue
at https://github.com/landlock-lsm/linux/issues/66 where I outlined
the rough process, which is mostly mechanical.  I am happy to do a
review.

Thanks,
Günther