mirror of https://github.com/torvalds/linux.git
3457a5ccac
Reinforce the already stated policy that LANDLOCK_ACCESS_FS_TRUNCATE should always go hand in hand with LANDLOCK_ACCESS_FS_WRITE_FILE, as their meanings and enforcement overlap in counterintuitive ways. On many common file systems, fallocate(2) offers a way to shorten files as long as the file is opened for writing, side-stepping the LANDLOCK_ACCESS_FS_TRUNCATE right. Assisted-by: Gemini-CLI:gemini-3.1 Signed-off-by: Günther Noack <gnoack@google.com> Link: https://lore.kernel.org/r/20260401150911.1038072-1-gnoack@google.com Signed-off-by: Mickaël Salaün <mic@digikod.net> |
||
|---|---|---|
| .. | ||
| accelerators | ||
| ebpf | ||
| fwctl | ||
| gpio | ||
| ioctl | ||
| media | ||
| netlink | ||
| ELF.rst | ||
| check_exec.rst | ||
| dcdbas.rst | ||
| dma-buf-alloc-exchange.rst | ||
| dma-buf-heaps.rst | ||
| futex2.rst | ||
| index.rst | ||
| iommufd.rst | ||
| isapnp.rst | ||
| landlock.rst | ||
| liveupdate.rst | ||
| lsm.rst | ||
| mfd_noexec.rst | ||
| mseal.rst | ||
| no_new_privs.rst | ||
| ntsync.rst | ||
| perf_ring_buffer.rst | ||
| rseq.rst | ||
| seccomp_filter.rst | ||
| spec_ctrl.rst | ||
| sysfs-platform_profile.rst | ||
| tee.rst | ||
| unshare.rst | ||
| vduse.rst | ||