commit ed1d237e76633efa58d3dbcb22be64d2a720fa7e from: Omar Polo date: Sat Nov 27 09:04:11 2021 UTC add comment on why don't landlock the net process commit - 540f6d7e2253ed6ae60c0eea3f613ee78d89509f commit + ed1d237e76633efa58d3dbcb22be64d2a720fa7e blob - 4347f2d3976b765e980faccb1a38f76285e82005 blob + c4e02ae5af2073034cc7d33a426fa6719edddb8f --- sandbox.c +++ sandbox.c @@ -179,6 +179,10 @@ landlock_no_fs(void) void sandbox_net_process(void) { + /* + * We don't know what paths are required for the TLS stack. + * Yes, it sucks. + */ return; }