diff options
author | Mickaël Salaün <mic@digikod.net> | 2022-05-06 18:08:19 +0200 |
---|---|---|
committer | Mickaël Salaün <mic@digikod.net> | 2022-05-23 13:27:51 +0200 |
commit | eba39ca4b155c54adf471a69e91799cc1727873f (patch) | |
tree | ee3063cc1acbe6bf317cda7d459cb1323e3514cb /kernel | |
parent | 589172e5636c4d16c40b90e87543d43defe2d968 (diff) |
landlock: Change landlock_restrict_self(2) check ordering
According to the Landlock goal to be a security feature available to
unprivileges processes, it makes more sense to first check for
no_new_privs before checking anything else (i.e. syscall arguments).
Merge inval_fd_enforce and unpriv_enforce_without_no_new_privs tests
into the new restrict_self_checks_ordering. This is similar to the
previous commit checking other syscalls.
Link: https://lore.kernel.org/r/20220506160820.524344-10-mic@digikod.net
Cc: stable@vger.kernel.org
Signed-off-by: Mickaël Salaün <mic@digikod.net>
Diffstat (limited to 'kernel')
0 files changed, 0 insertions, 0 deletions