Mickaël Salaün 385975dca5 landlock: Set up the security framework and manage credentials ... Process's credentials point to a Landlock domain, which is underneath implemented with a ruleset. In the following commits, this domain is used to check and enforce the ptrace and filesystem security policies. A domain is inherited from a parent to its child the same way a thread inherits a seccomp policy. Cc: James Morris <jmorris@namei.org> Signed-off-by: Mickaël Salaün <mic@linux.microsoft.com> Reviewed-by: Jann Horn <jannh@google.com> Acked-by: Serge Hallyn <serge@hallyn.com> Reviewed-by: Kees Cook <keescook@chromium.org> Link: https://lore.kernel.org/r/20210422154123.13086-4-mic@digikod.net Signed-off-by: James Morris <jamorris@linux.microsoft.com>		2021-04-22 12:22:10 -07:00
..
common.h	landlock: Set up the security framework and manage credentials	2021-04-22 12:22:10 -07:00
cred.c	landlock: Set up the security framework and manage credentials	2021-04-22 12:22:10 -07:00
cred.h	landlock: Set up the security framework and manage credentials	2021-04-22 12:22:10 -07:00
Kconfig
limits.h	landlock: Add ruleset and domain management	2021-04-22 12:22:10 -07:00
Makefile	landlock: Set up the security framework and manage credentials	2021-04-22 12:22:10 -07:00
object.c
object.h
ruleset.c	landlock: Add ruleset and domain management	2021-04-22 12:22:10 -07:00
ruleset.h	landlock: Add ruleset and domain management	2021-04-22 12:22:10 -07:00
setup.c	landlock: Set up the security framework and manage credentials	2021-04-22 12:22:10 -07:00
setup.h	landlock: Set up the security framework and manage credentials	2021-04-22 12:22:10 -07:00