From 7f7d13d9e9b8d5df41751505d791aa78d4ff6702 Mon Sep 17 00:00:00 2001 From: Mickaël Salaün Date: Wed, 19 Jan 2022 14:12:41 +0100 Subject: sys/linux: add the Landlock refer access flag MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Add the new LANDLOCK_ACCESS_FS_REFER flag for the full link and rename handling. Signed-off-by: Mickaël Salaün --- sys/linux/landlock.txt | 2 +- sys/linux/landlock.txt.const | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) (limited to 'sys/linux') diff --git a/sys/linux/landlock.txt b/sys/linux/landlock.txt index c3d03d96a..6fe976f12 100644 --- a/sys/linux/landlock.txt +++ b/sys/linux/landlock.txt @@ -18,4 +18,4 @@ landlock_path_beneath_attr { parent_fd fd } [packed] -landlock_access_flags = LANDLOCK_ACCESS_FS_EXECUTE, LANDLOCK_ACCESS_FS_MAKE_BLOCK, LANDLOCK_ACCESS_FS_MAKE_CHAR, LANDLOCK_ACCESS_FS_MAKE_DIR, LANDLOCK_ACCESS_FS_MAKE_FIFO, LANDLOCK_ACCESS_FS_MAKE_REG, LANDLOCK_ACCESS_FS_MAKE_SOCK, LANDLOCK_ACCESS_FS_MAKE_SYM, LANDLOCK_ACCESS_FS_READ_DIR, LANDLOCK_ACCESS_FS_READ_FILE, LANDLOCK_ACCESS_FS_REMOVE_DIR, LANDLOCK_ACCESS_FS_REMOVE_FILE, LANDLOCK_ACCESS_FS_WRITE_FILE +landlock_access_flags = LANDLOCK_ACCESS_FS_EXECUTE, LANDLOCK_ACCESS_FS_MAKE_BLOCK, LANDLOCK_ACCESS_FS_MAKE_CHAR, LANDLOCK_ACCESS_FS_MAKE_DIR, LANDLOCK_ACCESS_FS_MAKE_FIFO, LANDLOCK_ACCESS_FS_MAKE_REG, LANDLOCK_ACCESS_FS_MAKE_SOCK, LANDLOCK_ACCESS_FS_MAKE_SYM, LANDLOCK_ACCESS_FS_READ_DIR, LANDLOCK_ACCESS_FS_READ_FILE, LANDLOCK_ACCESS_FS_REFER, LANDLOCK_ACCESS_FS_REMOVE_DIR, LANDLOCK_ACCESS_FS_REMOVE_FILE, LANDLOCK_ACCESS_FS_WRITE_FILE diff --git a/sys/linux/landlock.txt.const b/sys/linux/landlock.txt.const index bf0609781..ef88b8134 100644 --- a/sys/linux/landlock.txt.const +++ b/sys/linux/landlock.txt.const @@ -10,6 +10,7 @@ LANDLOCK_ACCESS_FS_MAKE_SOCK = 512 LANDLOCK_ACCESS_FS_MAKE_SYM = 4096 LANDLOCK_ACCESS_FS_READ_DIR = 8 LANDLOCK_ACCESS_FS_READ_FILE = 4 +LANDLOCK_ACCESS_FS_REFER = 8192 LANDLOCK_ACCESS_FS_REMOVE_DIR = 16 LANDLOCK_ACCESS_FS_REMOVE_FILE = 32 LANDLOCK_ACCESS_FS_WRITE_FILE = 2 -- cgit mrf-deployment