Received: by 2002:a05:6a10:206:0:0:0:0 with SMTP id 6csp184736pxj; Tue, 15 Jun 2021 23:29:50 -0700 (PDT) X-Google-Smtp-Source: ABdhPJzHH8H+ZQjXdbVspK9xswo9HDKz3/7uUKSeFeY8kJvhcYdMhJ3kwKVY9trnQ++4NDS+R1Ye X-Received: by 2002:a05:6e02:1809:: with SMTP id a9mr2455301ilv.221.1623824990056; Tue, 15 Jun 2021 23:29:50 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1623824990; cv=none; d=google.com; s=arc-20160816; b=Y6XoyKXbZyCyRqZgpJfV8X20W1X1l8f0LGYf6t4O7yHY0Y0CjLbXtAaJV5lDse2lyt a8wkQbAVTYfOEs2981zp69XZtWnrus/HOXIwTZOecUL6BmpsTbadK9yTIvDv/9jNz0ph eExHPvZG1R8kQ1oHDU4L5fJBW49d0NWmLCkaWhQasQZbf7NSeIpzuTOeEst0ZmHLg/Xj E06vq6XD1oHfwVjFRn3sPnjvX8eJWfME3FlY72mVspL1GhNHk0FdqRJipzvkXHP7rv4f r4K/VsU0HpAgJJOgUoAML51EOwJxeU/Ws7n4OFS5mUPlTfPx/nseuL0dKbkkc0nssiC5 EAPQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :dkim-signature; bh=1FV2R+AggiXZIrGXGBaBB/nEPtyTUqAyHdF25R6zQHI=; b=Q3j2Jw0NBzVqgIT4wT9lxgRhqxv8w6AjEA2+LRnTiCR1UPQN3LJCSprUf+gPzbibMO sj+RDIOjX6RjE6HmZ1n3kVTBVv86qNvDz+RJVKxafrNu6HLKm+re12jbB38nJSiLooJq MR6qV9mV0Kkz3ORamS+M+TDiaCZ8LTdxy5SKl2xV9LMIGMG/uS/hNmj8tpcYUl7Sd8LX adAQGDqLSlfhqt+wMmUxr7TNlb3ol6VlQ3OXzeFqRaZxxNmrwjhWozNmQQLXW7NMxhx+ EVMvZVkyS+dBK3q7OwHuLWg5azL2z3VZ5HdSxTOSRdwpzywwh7z9mEX97++96IVErpAo Xm5w== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=r6e8xlst; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id r26si1680166jai.54.2021.06.15.23.29.38; Tue, 15 Jun 2021 23:29:50 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=r6e8xlst; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S232055AbhFPGa4 (ORCPT + 99 others); Wed, 16 Jun 2021 02:30:56 -0400 Received: from mail.kernel.org ([198.145.29.99]:60488 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S231694AbhFPG34 (ORCPT ); Wed, 16 Jun 2021 02:29:56 -0400 Received: by mail.kernel.org (Postfix) with ESMTPSA id E57D261412; Wed, 16 Jun 2021 06:27:48 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1623824869; bh=BSGXxyqvPvWufTNDi9kWzIf7K9GAT+ID0ZQoJHx3Or0=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=r6e8xlstdyJpBZFRTUthfn8Hk59Lbc2oPV2xSkY6kCv3//DYdAUBIJIJxt4eeMNbk nASmYDsWYc6/rfkhU8upcIu5ybZ8vUpv4sfH4iSN/a16Q7H1O+bZIPdsIKVR6LOqlb 5SZo1aN9fApAxTY5rWQgUryLSvVO6Q4LbumI6/ijcPcQIQzWdbGooJ57T39hln0SDq PdK48a8jojmfK/o3jetjWKkMU+8mjOC10NS0Fqip+sz3UmKyT/riBsYHCf8yUqjoBJ KUTgW1AWwXqJJenkZLKZqRkKxhwzXJPksH9sq8f7iDYUCmQRxwgSXzK991JnVxa+5i FarkTBsdCIypg== Received: by mail.kernel.org with local (Exim 4.94.2) (envelope-from ) id 1ltP1f-004kK2-6n; Wed, 16 Jun 2021 08:27:47 +0200 From: Mauro Carvalho Chehab To: Jonathan Corbet , Linux Doc Mailing List Cc: Mauro Carvalho Chehab , =?UTF-8?q?Micka=C3=ABl=20Sala=C3=BCn?= , linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org Subject: [PATCH v2 27/29] docs: userspace-api: landlock.rst: avoid using ReST :doc:`foo` markup Date: Wed, 16 Jun 2021 08:27:42 +0200 Message-Id: <24888a9c5da3c505b2bc274fcd83be348dbaf972.1623824363.git.mchehab+huawei@kernel.org> X-Mailer: git-send-email 2.31.1 In-Reply-To: References: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Sender: Mauro Carvalho Chehab Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org The :doc:`foo` tag is auto-generated via automarkup.py. So, use the filename at the sources, instead of :doc:`foo`. Signed-off-by: Mauro Carvalho Chehab --- Documentation/userspace-api/landlock.rst | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/Documentation/userspace-api/landlock.rst b/Documentation/userspace-api/landlock.rst index 62c9361a3c7f..f35552ff19ba 100644 --- a/Documentation/userspace-api/landlock.rst +++ b/Documentation/userspace-api/landlock.rst @@ -145,7 +145,8 @@ Bind mounts and OverlayFS Landlock enables to restrict access to file hierarchies, which means that these access rights can be propagated with bind mounts (cf. -:doc:`/filesystems/sharedsubtree`) but not with :doc:`/filesystems/overlayfs`. +Documentation/filesystems/sharedsubtree.rst) but not with +Documentation/filesystems/overlayfs.rst. A bind mount mirrors a source file hierarchy to a destination. The destination hierarchy is then composed of the exact same files, on which Landlock rules can @@ -170,8 +171,8 @@ Inheritance Every new thread resulting from a :manpage:`clone(2)` inherits Landlock domain restrictions from its parent. This is similar to the seccomp inheritance (cf. -:doc:`/userspace-api/seccomp_filter`) or any other LSM dealing with task's -:manpage:`credentials(7)`. For instance, one process's thread may apply +Documentation/userspace-api/seccomp_filter.rst) or any other LSM dealing with +task's :manpage:`credentials(7)`. For instance, one process's thread may apply Landlock rules to itself, but they will not be automatically applied to other sibling threads (unlike POSIX thread credential changes, cf. :manpage:`nptl(7)`). @@ -278,7 +279,7 @@ Memory usage ------------ Kernel memory allocated to create rulesets is accounted and can be restricted -by the :doc:`/admin-guide/cgroup-v1/memory`. +by the Documentation/admin-guide/cgroup-v1/memory.rst. Questions and answers ===================== @@ -303,7 +304,7 @@ issues, especially when untrusted processes can manipulate them (cf. Additional documentation ======================== -* :doc:`/security/landlock` +* Documentation/security/landlock.rst * https://landlock.io .. Links -- 2.31.1