From 46cab38fc3737d330ec3d39323356420ebb14ef9 Mon Sep 17 00:00:00 2001 From: Mickaël Salaün Date: Thu, 22 Jan 2026 16:19:46 +0100 Subject: sys/linux: add new Landlock scope right MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Add the new LANDLOCK_SCOPE_PATHNAME_UNIX_SOCKET scope right. Signed-off-by: Mickaël Salaün --- sys/linux/landlock.txt | 2 +- sys/linux/landlock.txt.const | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) (limited to 'sys/linux') diff --git a/sys/linux/landlock.txt b/sys/linux/landlock.txt index fb81d38db..744057556 100644 --- a/sys/linux/landlock.txt +++ b/sys/linux/landlock.txt @@ -40,4 +40,4 @@ landlock_access_fs_flags = LANDLOCK_ACCESS_FS_EXECUTE, LANDLOCK_ACCESS_FS_WRITE_ landlock_access_net_flags = LANDLOCK_ACCESS_NET_BIND_TCP, LANDLOCK_ACCESS_NET_CONNECT_TCP -landlock_scope_flags = LANDLOCK_SCOPE_ABSTRACT_UNIX_SOCKET, LANDLOCK_SCOPE_SIGNAL +landlock_scope_flags = LANDLOCK_SCOPE_ABSTRACT_UNIX_SOCKET, LANDLOCK_SCOPE_SIGNAL, LANDLOCK_SCOPE_PATHNAME_UNIX_SOCKET diff --git a/sys/linux/landlock.txt.const b/sys/linux/landlock.txt.const index 23b776c46..3d43e1486 100644 --- a/sys/linux/landlock.txt.const +++ b/sys/linux/landlock.txt.const @@ -26,6 +26,7 @@ LANDLOCK_RESTRICT_SELF_LOG_SUBDOMAINS_OFF = 4 LANDLOCK_RULE_NET_PORT = 2 LANDLOCK_RULE_PATH_BENEATH = 1 LANDLOCK_SCOPE_ABSTRACT_UNIX_SOCKET = 1 +LANDLOCK_SCOPE_PATHNAME_UNIX_SOCKET = 4 LANDLOCK_SCOPE_SIGNAL = 2 __NR_landlock_add_rule = 445, mips64le:5445 __NR_landlock_create_ruleset = 444, mips64le:5444 -- cgit mrf-deployment