Tree
Tree:
39a6226c6d8a24a36e99a0bab2cae4d1b2bf46d0
Date:
Thu Feb 10 22:29:51 2022
UTC
Message:
fix landlock usage
Mickaël Salaün, the landlock author, pointed out the same error on the
got implementation. The assumption that not listed access
capabilities are implicitly denied is completely wrong:
> In a nutshell, the ruleset's handled_access_fs is required for
> backward and forward compatibility (i.e. the kernel and user space may
> not know each other's supported restrictions), hence the need to be
> explicit about the denied-by-default access rights.
Omar Polo