summaryrefslogtreecommitdiff
path: root/kernel
diff options
context:
space:
mode:
authorMickaël Salaün <mic@digikod.net>2022-05-06 18:08:19 +0200
committerMickaël Salaün <mic@digikod.net>2022-05-23 13:27:51 +0200
commiteba39ca4b155c54adf471a69e91799cc1727873f (patch)
treeee3063cc1acbe6bf317cda7d459cb1323e3514cb /kernel
parent589172e5636c4d16c40b90e87543d43defe2d968 (diff)
landlock: Change landlock_restrict_self(2) check ordering
According to the Landlock goal to be a security feature available to unprivileges processes, it makes more sense to first check for no_new_privs before checking anything else (i.e. syscall arguments). Merge inval_fd_enforce and unpriv_enforce_without_no_new_privs tests into the new restrict_self_checks_ordering. This is similar to the previous commit checking other syscalls. Link: https://lore.kernel.org/r/20220506160820.524344-10-mic@digikod.net Cc: stable@vger.kernel.org Signed-off-by: Mickaël Salaün <mic@digikod.net>
Diffstat (limited to 'kernel')
0 files changed, 0 insertions, 0 deletions