mirror-linux/security/landlock
Tingmao Wang ef4536f152
landlock: Improve the comment for domain_is_scoped
Currently it is not obvious what "scoped" mean, and the fact that the
function returns true when access should be denied is slightly surprising
and in need of documentation.

Cc: Tahera Fahimi <fahimitahera@gmail.com>
Signed-off-by: Tingmao Wang <m@maowtm.org>
Link: https://lore.kernel.org/r/06393bc18aee5bc278df5ef31c64a05b742ebc10.1766885035.git.m@maowtm.org
[mic: Fix formatting and improve consistency]
Signed-off-by: Mickaël Salaün <mic@digikod.net>
2025-12-29 16:19:39 +01:00
..
errata landlock: Improve erratum documentation 2025-12-26 20:39:00 +01:00
.kunitconfig landlock: Add unique ID generator 2025-03-26 13:59:34 +01:00
Kconfig landlock: Add support for KUnit tests 2024-02-27 11:21:45 +01:00
Makefile landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denials 2025-03-26 13:59:38 +01:00
access.h landlock: Log truncate and IOCTL denials 2025-03-26 13:59:41 +01:00
audit.c landlock: Fix wrong type usage 2025-12-26 20:38:59 +01:00
audit.h landlock: Log scoped denials 2025-03-26 13:59:42 +01:00
common.h landlock: Add support for KUnit tests 2024-02-27 11:21:45 +01:00
cred.c landlock: Identify domain execution crossing 2025-03-26 13:59:37 +01:00
cred.h landlock: Add LANDLOCK_RESTRICT_SELF_LOG_SUBDOMAINS_OFF 2025-03-26 13:59:43 +01:00
domain.c landlock: Log the TGID of the domain creator 2025-04-11 12:53:17 +02:00
domain.h landlock: Fix spelling 2025-12-26 20:39:01 +01:00
errata.h landlock: Prepare to add second errata 2025-03-21 12:12:21 +01:00
fs.c landlock: Optimize stack usage when !CONFIG_AUDIT 2025-12-29 16:19:35 +01:00
fs.h landlock: Log scoped denials 2025-03-26 13:59:42 +01:00
id.c landlock: Fix warning from KUnit tests 2025-06-27 10:10:37 +02:00
id.h landlock: Add unique ID generator 2025-03-26 13:59:34 +01:00
limits.h landlock: Add LANDLOCK_RESTRICT_SELF_LOG_SUBDOMAINS_OFF 2025-03-26 13:59:43 +01:00
net.c landlock: Fix TCP handling of short AF_UNSPEC addresses 2025-12-26 20:38:56 +01:00
net.h landlock: Support network rules with TCP bind and connect 2023-10-26 21:07:15 +02:00
object.c landlock: Format with clang-format 2022-05-09 12:31:10 +02:00
object.h landlock: Format with clang-format 2022-05-09 12:31:10 +02:00
ruleset.c landlock: Remove useless include 2025-12-26 20:39:00 +01:00
ruleset.h landlock: Minor comments improvements 2025-11-26 20:20:21 +01:00
setup.c lsm: replace the name field with a pointer to the lsm_id struct 2025-10-22 19:24:18 -04:00
setup.h landlock: Add the errata interface 2025-03-21 12:12:19 +01:00
syscalls.c landlock: opened file never has a negative dentry 2025-06-17 18:03:57 -04:00
task.c landlock: Improve the comment for domain_is_scoped 2025-12-29 16:19:39 +01:00
task.h landlock: Rename "ptrace" files to "task" 2024-03-08 18:22:16 +01:00