Received: by 2002:a05:6a10:206:0:0:0:0 with SMTP id 6csp1895043pxj; Sat, 5 Jun 2021 06:23:39 -0700 (PDT) X-Google-Smtp-Source: ABdhPJyItjpLRyWKZlccctmbVL85OkM2NkTgAtSDJst6Ix2/tpOWLgFiL8gjMSWLcWhn/bKRmrnn X-Received: by 2002:a17:907:76d4:: with SMTP id kf20mr8963696ejc.164.1622899418954; Sat, 05 Jun 2021 06:23:38 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1622899418; cv=none; d=google.com; s=arc-20160816; b=KtmO7pEs5qVg6gyrzlxmS7SccOWwViGy6bz09ObtCla8pbsmlF8pNS6nGPWQYRoYcK yolQTF8byJPXGJQ1yJwogrBCmcXaIfkLCD58F9ErKjstJYceafnzDbThbk1skN2z9IUS t0dNSDZMWJASPVPfKF20zX0QRAVrlvlbYVAq2aQoaCxuQ+2nRglJr46xGFs5WPDLSkmg 5ZhYeg1BjTxqyftctJIrTWm1eK1NFCjt3N2phFj0IRgGHIpqIcXF3mGYS34N9vGmx7QX hpGYOkGcfvdAJGy6Q4JsNoD3TKeLWjJtdMMWCiqnwhv3KgKWOnd6HODW/DB3YVCrGTZ7 dMUQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :dkim-signature; bh=1FV2R+AggiXZIrGXGBaBB/nEPtyTUqAyHdF25R6zQHI=; b=zBTDJfjeCV9FkAd9U2ex2ejZpxPZeM152/+FxtyF8ZWklLqrRmxZnWve4YWoPaZvin 41OQoLZjS7qyyHXVki2xYQBnRd2Ds+rGyY76WHf4bVcYdTcrEQFGjHM3gqtkoXbRzIrG PTRVbNcMuYCeyHvDbZ1V53/YyrRttoufE1/4NvJyLv04AyQpzwgwS/triwRQUftNKl3d YDfHHwA0FhP37fVS8u+SGL9oGfxYqU+hYjnULYaUg4uIxqn/r1dWaxGIIYGxIVXcLmmi ave8W4CAaGrbDiruFvdGLiyAw/pf8GVW4bEix/f4sJt5/aDgwwvOdlyy/2rkM1767vjn txRQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b="Fo9nVj/u"; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id j10si7227243ejv.206.2021.06.05.06.23.16; Sat, 05 Jun 2021 06:23:38 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b="Fo9nVj/u"; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S231262AbhFENVP (ORCPT + 99 others); Sat, 5 Jun 2021 09:21:15 -0400 Received: from mail.kernel.org ([198.145.29.99]:35102 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230129AbhFENU0 (ORCPT ); Sat, 5 Jun 2021 09:20:26 -0400 Received: by mail.kernel.org (Postfix) with ESMTPSA id 8C9486145A; Sat, 5 Jun 2021 13:18:38 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1622899118; bh=BSGXxyqvPvWufTNDi9kWzIf7K9GAT+ID0ZQoJHx3Or0=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=Fo9nVj/u+WA7bi9Pk8u/N8TTSwrl9W0cqIRvVOsTNHm3OgrDpc3RMi9ptidM+GRci PYCAbMGrkwSWyn81lbuOM0anzN+qnc9u+PlnLyVkahDPN+PQZun2l5rzjJrcfewnq8 8PZHByDwXZq8JKQonfYhEY+0tZxNfaYrTu2F0a4T6XlDMQ9Gzb1ZQkFmqhvgk1a2sr ck6/jlVlBIGEtkZ5dOCH7aQlgZWhmsujSEfLuXFVwkqIE78HwShzu7pZbhKWOKV6Sr CKnLhzJK2B8JuDi5kjOzw7i3HvSmtaxyi0L/hnD01XYnkzlMHCIPDpy2Y2GsxrIWjt Ied8+cbd2tFtA== Received: by mail.kernel.org with local (Exim 4.94.2) (envelope-from ) id 1lpWCC-008GGX-Rg; Sat, 05 Jun 2021 15:18:36 +0200 From: Mauro Carvalho Chehab To: "Jonathan Corbet" , Linux Doc Mailing List Cc: Mauro Carvalho Chehab , =?UTF-8?q?Micka=C3=ABl=20Sala=C3=BCn?= , linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org Subject: [PATCH 32/34] docs: userspace-api: landlock.rst: avoid using ReSt :doc:`foo` markup Date: Sat, 5 Jun 2021 15:18:31 +0200 Message-Id: <5a40dfed12363477bf961e4ca2dceeef987c322d.1622898327.git.mchehab+huawei@kernel.org> X-Mailer: git-send-email 2.31.1 In-Reply-To: References: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Sender: Mauro Carvalho Chehab Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org The :doc:`foo` tag is auto-generated via automarkup.py. So, use the filename at the sources, instead of :doc:`foo`. Signed-off-by: Mauro Carvalho Chehab --- Documentation/userspace-api/landlock.rst | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/Documentation/userspace-api/landlock.rst b/Documentation/userspace-api/landlock.rst index 62c9361a3c7f..f35552ff19ba 100644 --- a/Documentation/userspace-api/landlock.rst +++ b/Documentation/userspace-api/landlock.rst @@ -145,7 +145,8 @@ Bind mounts and OverlayFS Landlock enables to restrict access to file hierarchies, which means that these access rights can be propagated with bind mounts (cf. -:doc:`/filesystems/sharedsubtree`) but not with :doc:`/filesystems/overlayfs`. +Documentation/filesystems/sharedsubtree.rst) but not with +Documentation/filesystems/overlayfs.rst. A bind mount mirrors a source file hierarchy to a destination. The destination hierarchy is then composed of the exact same files, on which Landlock rules can @@ -170,8 +171,8 @@ Inheritance Every new thread resulting from a :manpage:`clone(2)` inherits Landlock domain restrictions from its parent. This is similar to the seccomp inheritance (cf. -:doc:`/userspace-api/seccomp_filter`) or any other LSM dealing with task's -:manpage:`credentials(7)`. For instance, one process's thread may apply +Documentation/userspace-api/seccomp_filter.rst) or any other LSM dealing with +task's :manpage:`credentials(7)`. For instance, one process's thread may apply Landlock rules to itself, but they will not be automatically applied to other sibling threads (unlike POSIX thread credential changes, cf. :manpage:`nptl(7)`). @@ -278,7 +279,7 @@ Memory usage ------------ Kernel memory allocated to create rulesets is accounted and can be restricted -by the :doc:`/admin-guide/cgroup-v1/memory`. +by the Documentation/admin-guide/cgroup-v1/memory.rst. Questions and answers ===================== @@ -303,7 +304,7 @@ issues, especially when untrusted processes can manipulate them (cf. Additional documentation ======================== -* :doc:`/security/landlock` +* Documentation/security/landlock.rst * https://landlock.io .. Links -- 2.31.1