]> git.apps.os.sepia.ceph.com Git - ceph-client.git/commit
projects / ceph-client.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8376226) | patch
landlock: Optimize scope enforcement
authorMickaël Salaün <mic@digikod.net>
Sat, 9 Nov 2024 11:08:56 +0000 (12:08 +0100)
committerMickaël Salaün <mic@digikod.net>
Sat, 9 Nov 2024 18:52:13 +0000 (19:52 +0100)
commit03197e40a22c2641a1f9d1744418cd29f4954b83
treebe23d85a4e8a2e16945784a55fc9af2f4f88c625tree | snapshot
parent8376226e5f53e78cd16a2b23577304e43acb3ba4commit | diff
landlock: Optimize scope enforcement

Do not walk through the domain hierarchy when the required scope is not
supported by this domain.  This is the same approach as for filesystem
and network restrictions.

Cc: Mikhail Ivanov <ivanov.mikhail1@huawei-partners.com>
Cc: Tahera Fahimi <fahimitahera@gmail.com>
Reviewed-by: Günther Noack <gnoack@google.com>
Link: https://lore.kernel.org/r/20241109110856.222842-4-mic@digikod.net
Signed-off-by: Mickaël Salaün <mic@digikod.net>
security/landlock/task.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.