| commit | ee05b11b67d59a6c5bb4b9d661bcc20bbd0bbe7a | |
| author | Szabolcs Nagy <nsz@port70.net> | |
| Sun, 4 Jul 2021 16:34:15 +0000 (4 16:34 +0000) | ||
| committer | Rich Felker <dalias@aerifal.cx> | |
| Tue, 8 Mar 2022 22:21:14 +0000 (8 17:21 -0500) | ||
| tree | a3d584b3ac147cdb3013a7c7c905484781e3ad16 | treesnapshot (tar.gz zip) |
| parent | 1ee8109ea01c4ac79e7932a533fead96309f80f3 | commitdiff |
bits/syscall.h: add landlock syscalls from linux v5.13
see
linux commit a49f4f81cb48925e8d7cbd9e59068f516e984144
arch: Wire up Landlock syscalls
linuxcommit 17ae69aba89dbfa2139b7f8024b757ab3cc42f59
Merge tag 'landlock_v34' of ... jmorris/linux-security
Landlock provides for unprivileged application sandboxing. The goal of
Landlock is to enable to restrict ambient rights (e.g. global filesystem
access) for a set of processes. Landlock is inspired by seccomp-bpf but
instead of filtering syscalls and their raw arguments, a Landlock rule
can restrict the use of kernel objects like file hierarchies, according
to the kernel semantic.
see
linux commit a49f4f81cb48925e8d7cbd9e59068f516e984144
arch: Wire up Landlock syscalls
linuxcommit 17ae69aba89dbfa2139b7f8024b757ab3cc42f59
Merge tag 'landlock_v34' of ... jmorris/linux-security
Landlock provides for unprivileged application sandboxing. The goal of
Landlock is to enable to restrict ambient rights (e.g. global filesystem
access) for a set of processes. Landlock is inspired by seccomp-bpf but
instead of filtering syscalls and their raw arguments, a Landlock rule
can restrict the use of kernel objects like file hierarchies, according
to the kernel semantic.
16 files changed: