From 4c87732d5b481c98a5c663aa6faf5735e27bc93f Mon Sep 17 00:00:00 2001 From: Mickaël Salaün Date: Mon, 3 Oct 2022 13:03:08 +0200 Subject: sys/linux: add the Landlock truncate access flag MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Add the new LANDLOCK_ACCESS_FS_TRUNCATE flag for the file truncation handling. Signed-off-by: Mickaël Salaün --- sys/linux/landlock.txt | 2 +- sys/linux/landlock.txt.const | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) (limited to 'sys/linux') diff --git a/sys/linux/landlock.txt b/sys/linux/landlock.txt index 6fe976f12..6b225cf40 100644 --- a/sys/linux/landlock.txt +++ b/sys/linux/landlock.txt @@ -18,4 +18,4 @@ landlock_path_beneath_attr { parent_fd fd } [packed] -landlock_access_flags = LANDLOCK_ACCESS_FS_EXECUTE, LANDLOCK_ACCESS_FS_MAKE_BLOCK, LANDLOCK_ACCESS_FS_MAKE_CHAR, LANDLOCK_ACCESS_FS_MAKE_DIR, LANDLOCK_ACCESS_FS_MAKE_FIFO, LANDLOCK_ACCESS_FS_MAKE_REG, LANDLOCK_ACCESS_FS_MAKE_SOCK, LANDLOCK_ACCESS_FS_MAKE_SYM, LANDLOCK_ACCESS_FS_READ_DIR, LANDLOCK_ACCESS_FS_READ_FILE, LANDLOCK_ACCESS_FS_REFER, LANDLOCK_ACCESS_FS_REMOVE_DIR, LANDLOCK_ACCESS_FS_REMOVE_FILE, LANDLOCK_ACCESS_FS_WRITE_FILE +landlock_access_flags = LANDLOCK_ACCESS_FS_EXECUTE, LANDLOCK_ACCESS_FS_MAKE_BLOCK, LANDLOCK_ACCESS_FS_MAKE_CHAR, LANDLOCK_ACCESS_FS_MAKE_DIR, LANDLOCK_ACCESS_FS_MAKE_FIFO, LANDLOCK_ACCESS_FS_MAKE_REG, LANDLOCK_ACCESS_FS_MAKE_SOCK, LANDLOCK_ACCESS_FS_MAKE_SYM, LANDLOCK_ACCESS_FS_READ_DIR, LANDLOCK_ACCESS_FS_READ_FILE, LANDLOCK_ACCESS_FS_REFER, LANDLOCK_ACCESS_FS_REMOVE_DIR, LANDLOCK_ACCESS_FS_REMOVE_FILE, LANDLOCK_ACCESS_FS_TRUNCATE, LANDLOCK_ACCESS_FS_WRITE_FILE diff --git a/sys/linux/landlock.txt.const b/sys/linux/landlock.txt.const index ef88b8134..b5fac871b 100644 --- a/sys/linux/landlock.txt.const +++ b/sys/linux/landlock.txt.const @@ -13,6 +13,7 @@ LANDLOCK_ACCESS_FS_READ_FILE = 4 LANDLOCK_ACCESS_FS_REFER = 8192 LANDLOCK_ACCESS_FS_REMOVE_DIR = 16 LANDLOCK_ACCESS_FS_REMOVE_FILE = 32 +LANDLOCK_ACCESS_FS_TRUNCATE = 16384 LANDLOCK_ACCESS_FS_WRITE_FILE = 2 LANDLOCK_RULE_PATH_BENEATH = 1 __NR_landlock_add_rule = 445, mips64le:5445 -- cgit mrf-deployment