[PATCH v2 -next 17/18] samples/landlock: Add metadata rights to sandboxer

[sashiko-bot at kernel.org]

> Handle the new LANDLOCK_ACCESS_FS_READ_METADATA and
> LANDLOCK_ACCESS_FS_WRITE_METADATA access rights in the sandboxer:
> READ_METADATA is added to the read-only set, WRITE_METADATA to the
> read-write set, and both to ACCESS_FILE.
> 
> Update the ABI version fallback switch to remove the metadata rights
> for ABI < 13, and bump LANDLOCK_ABI_LAST to 13.
> 
> Assisted-by: opencode: glm-5.3
> Signed-off-by: Cai Xinchen <caixinchen1 at huawei.com>

Sashiko has reviewed this patch and found no issues. It looks great!

-- 
Sashiko AI review · https://sashiko.dev/#/patchset/20261015125425.3246251-1-caixinchen1@huawei.com?part=17