From 9cfeb485eb158217e644955bddc42e3bcf42ccbb Mon Sep 17 00:00:00 2001 From: "Kelvin M. Klann" Date: Sat, 10 Feb 2024 04:47:11 -0300 Subject: landlock: use "landlock.fs." prefix in filesystem commands Since Landlock ABI v4 it is possible to restrict actions related to the network and potentially more areas will be added in the future. So use `landlock.fs.` as the prefix in the current filesystem-related commands (and later `landlock.net.` for the network-related commands) to keep them organized and to match what is used in the kernel. Examples of filesystem and network access flags: * `LANDLOCK_ACCESS_FS_EXECUTE`: Execute a file. * `LANDLOCK_ACCESS_FS_READ_DIR`: Open a directory or list its content. * `LANDLOCK_ACCESS_NET_BIND_TCP`: Bind a TCP socket to a local port. * `LANDLOCK_ACCESS_NET_CONNECT_TCP`: Connect an active TCP socket to a remote port. Relates to #6078. --- etc/templates/profile.template | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) (limited to 'etc/templates') diff --git a/etc/templates/profile.template b/etc/templates/profile.template index 0e6a5734e..29ea55439 100644 --- a/etc/templates/profile.template +++ b/etc/templates/profile.template @@ -138,11 +138,11 @@ include globals.local #include whitelist-var-common.inc # Landlock commands -##landlock.read PATH -##landlock.write PATH -##landlock.makeipc PATH -##landlock.makedev PATH -##landlock.execute PATH +##landlock.fs.read PATH +##landlock.fs.write PATH +##landlock.fs.makeipc PATH +##landlock.fs.makedev PATH +##landlock.fs.execute PATH #include landlock-common.inc ##allusers -- cgit v1.2.3-54-g00ecf