eba39ca4b1
According to the Landlock goal to be a security feature available to unprivileges processes, it makes more sense to first check for no_new_privs before checking anything else (i.e. syscall arguments). Merge inval_fd_enforce and unpriv_enforce_without_no_new_privs tests into the new restrict_self_checks_ordering. This is similar to the previous commit checking other syscalls. Link: https://lore.kernel.org/r/20220506160820.524344-10-mic@digikod.net Cc: stable@vger.kernel.org Signed-off-by: Mickaël Salaün <mic@digikod.net> |
||
---|---|---|
.. | ||
.gitignore | ||
base_test.c | ||
common.h | ||
config | ||
fs_test.c | ||
Makefile | ||
ptrace_test.c | ||
true.c |