linux-stable/security/landlock
Mickaël Salaün d722036403
landlock: Allow FS topology changes for domains without such rule type
Allow mount point and root directory changes when there is no filesystem
rule tied to the current Landlock domain. This doesn't change anything
for now because a domain must have at least a (filesystem) rule, but
this will change when other rule types will come. For instance, a domain
only restricting the network should have no impact on filesystem
restrictions.

Add a new get_current_fs_domain() helper to quickly check filesystem
rule existence for all filesystem LSM hooks.

Remove unnecessary inlining.

Link: https://lore.kernel.org/r/20231026014751.414649-3-konstantin.meskhidze@huawei.com
Signed-off-by: Mickaël Salaün <mic@digikod.net>
2023-10-26 21:07:10 +02:00
..
common.h landlock: Set up the security framework and manage credentials 2021-04-22 12:22:10 -07:00
cred.c selinux: remove the runtime disable functionality 2023-03-20 12:34:23 -04:00
cred.h landlock: Format with clang-format 2022-05-09 12:31:10 +02:00
fs.c landlock: Allow FS topology changes for domains without such rule type 2023-10-26 21:07:10 +02:00
fs.h landlock: Support file truncation 2022-10-19 09:01:44 +02:00
Kconfig hostfs: Fix ephemeral inodes 2023-06-12 21:26:19 +02:00
limits.h landlock: Make ruleset's access masks more generic 2023-10-26 21:07:09 +02:00
Makefile landlock: Add syscall implementations 2021-04-22 12:22:11 -07:00
object.c landlock: Format with clang-format 2022-05-09 12:31:10 +02:00
object.h landlock: Format with clang-format 2022-05-09 12:31:10 +02:00
ptrace.c selinux: remove the runtime disable functionality 2023-03-20 12:34:23 -04:00
ptrace.h landlock: Add ptrace restrictions 2021-04-22 12:22:10 -07:00
ruleset.c landlock: Make ruleset's access masks more generic 2023-10-26 21:07:09 +02:00
ruleset.h landlock: Allow FS topology changes for domains without such rule type 2023-10-26 21:07:10 +02:00
setup.c selinux: remove the runtime disable functionality 2023-03-20 12:34:23 -04:00
setup.h landlock: Support filesystem access-control 2021-04-22 12:22:11 -07:00
syscalls.c landlock: Allow FS topology changes for domains without such rule type 2023-10-26 21:07:10 +02:00