lkml.org 
[lkml]   [2020]   [Oct]   [14]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: [PATCH v21 07/12] landlock: Support filesystem access-control
From
Date

On 14/10/2020 20:07, James Morris wrote:
> On Thu, 8 Oct 2020, Mickaël Salaün wrote:
>
>> +config ARCH_EPHEMERAL_STATES
>> + def_bool n
>> + help
>> + An arch should select this symbol if it does not keep an internal kernel
>> + state for kernel objects such as inodes, but instead relies on something
>> + else (e.g. the host kernel for an UML kernel).
>> +
>
> This is used to disable Landlock for UML, correct?

Yes

> I wonder if it could be
> more specific: "ephemeral states" is a very broad term.
>
> How about something like ARCH_OWN_INODES ?

Sounds good. We may need add new ones (e.g. for network socket, UID,
etc.) in the future though.

\
 
 \ /
  Last update: 2020-10-14 20:52    [W:0.066 / U:0.020 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site