diff options
| author | Mickaël Salaün <mic@digikod.net> | 2025-03-20 22:07:00 +0300 |
|---|---|---|
| committer | Mickaël Salaün <mic@digikod.net> | 2025-03-26 15:59:39 +0300 |
| commit | c56f649646ecec3dd1a2e400e6e5ec83439d940f (patch) | |
| tree | 3a3523fd3d5748cc111f37ba3f900db99ac4e153 /scripts/generate_rust_analyzer.py | |
| parent | 1d636984e088b17e8587eb5ed9d9d7a80b656c4c (diff) | |
| download | linux-c56f649646ecec3dd1a2e400e6e5ec83439d940f.tar.xz | |
landlock: Log mount-related denials
Add audit support for sb_mount, move_mount, sb_umount, sb_remount, and
sb_pivot_root hooks.
The new related blocker is "fs.change_topology".
Audit event sample:
type=LANDLOCK_DENY msg=audit(1729738800.349:44): domain=195ba459b blockers=fs.change_topology name="/" dev="tmpfs" ino=1
Remove landlock_get_applicable_domain() and get_current_fs_domain()
which are now fully replaced with landlock_get_applicable_subject().
Cc: Günther Noack <gnoack@google.com>
Link: https://lore.kernel.org/r/20250320190717.2287696-12-mic@digikod.net
Signed-off-by: Mickaël Salaün <mic@digikod.net>
Diffstat (limited to 'scripts/generate_rust_analyzer.py')
0 files changed, 0 insertions, 0 deletions