Received: by 2002:a05:6a10:413:0:0:0:0 with SMTP id 19csp912070pxp; Wed, 16 Mar 2022 21:04:04 -0700 (PDT) X-Google-Smtp-Source: ABdhPJwfZaWxORMpBX34+Lv0FEkEj/VC3T1Zt0S2yDwMgN7IaO1zg79g8Yfmr0xXhi+Y8Gp1j1Xd X-Received: by 2002:a17:903:2442:b0:151:e3e2:cbf9 with SMTP id l2-20020a170903244200b00151e3e2cbf9mr3139863pls.115.1647489844438; Wed, 16 Mar 2022 21:04:04 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1647489844; cv=none; d=google.com; s=arc-20160816; b=xUP/yNMxMY1pIzRFazSRl1PknB9yCLh6dld5iitZr+utEZccL9Shl/N1ASNmNQbTG0 c0NROgjhsbqfR7N/TgTtFXD3XB/4AJbk45lO2/FfayehNQZatgJut2/21jNjYurgocKE kSHZt+TglTNKvfgwlxyA4d2RH8Nuaun+EajME7WXrm9x8Qy9Iy08FbnEAREFVCfh/V3Z QCbzq8pvVbOMENwKDwA3aqq0ydDDpilyKoIvF4rDkwcJkjwR3cgN4wB64GKDgHU014JR cVERzIPf9q2hmO1SvBpGXOqc7/z1xKtmAodytYt4/UERINnsYY9Ka1Vm+wpB43iG9wtk nmlA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:cc:to:subject :message-id:date:from:in-reply-to:references:mime-version :dkim-signature; bh=VOxKsTGlBiXPbLWsRjfTqw/sHWeUi1uspD6WChZvBGc=; b=dbiZURZgyoSeuXIRcggrr6rM+A4aXGaXBubb2O/VJfzgpCzZvJILou7OCKfcuSDqDc Y7tI1F6GK7B4CrfN15MJmNOP61DmWD8DPyHs2o7YRc9YzmzdI51KmVzsJoRsXSnfeAoo nkooHBTaBqZynzdD9WzQR00iD4V45KaudOxPsy+/4fhZaptwnQqjh88JvU0+M7vS/YjC 9w9PUDlJsGkEo2FEmu6WDzNdg74zbzijw26+fnsejbfo5Jb4Bd3dDlvcRwZagTgp60/s RNih0gYy6E+dW8wjjf+HRkJZLphhRV+c6F9DXHp2rSlBDmd1ZjGtnA0cywEEhvWYnlrX jfUA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@paul-moore-com.20210112.gappssmtp.com header.s=20210112 header.b=LNQndeOS; spf=softfail (google.com: domain of transitioning linux-kernel-owner@vger.kernel.org does not designate 23.128.96.19 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from lindbergh.monkeyblade.net (lindbergh.monkeyblade.net. [23.128.96.19]) by mx.google.com with ESMTPS id b29-20020a63715d000000b003816043eee7si949407pgn.220.2022.03.16.21.04.03 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 16 Mar 2022 21:04:04 -0700 (PDT) Received-SPF: softfail (google.com: domain of transitioning linux-kernel-owner@vger.kernel.org does not designate 23.128.96.19 as permitted sender) client-ip=23.128.96.19; Authentication-Results: mx.google.com; dkim=pass header.i=@paul-moore-com.20210112.gappssmtp.com header.s=20210112 header.b=LNQndeOS; spf=softfail (google.com: domain of transitioning linux-kernel-owner@vger.kernel.org does not designate 23.128.96.19 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by lindbergh.monkeyblade.net (Postfix) with ESMTP id C17FD70073; Wed, 16 Mar 2022 20:46:01 -0700 (PDT) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1358450AbiCQB3K (ORCPT + 99 others); Wed, 16 Mar 2022 21:29:10 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:41180 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1358384AbiCQB25 (ORCPT ); Wed, 16 Mar 2022 21:28:57 -0400 Received: from mail-ed1-x531.google.com (mail-ed1-x531.google.com [IPv6:2a00:1450:4864:20::531]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 22D3E1EEFF for ; Wed, 16 Mar 2022 18:27:20 -0700 (PDT) Received: by mail-ed1-x531.google.com with SMTP id h13so4822424ede.5 for ; Wed, 16 Mar 2022 18:27:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore-com.20210112.gappssmtp.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=VOxKsTGlBiXPbLWsRjfTqw/sHWeUi1uspD6WChZvBGc=; b=LNQndeOSXW/bAWh7JNokNGhZ5eqGvlPxbUsfct7uX8e652+AZTZFl6ZnbKhzWsZnR1 F98RG8Wz1O2VsVCedS3lzBDewtqbBDLRgtzBBR4D0o7EZvQZNJjxyuAKcQhdfpXgs2kj KIIyEkSMSMqcOZyYfIPhbZTyng29T83GGHYU2CJJoH9IK8oJWnuaI8G4WSTUQr7ENP5L TNY2t+1Q1U69nlq1sH6hKoMoKg1JCpnaIZSqb3up1G95PvRLagrF6NifKl20EyuOChZ9 J7dAHfJVKkdxD77XohB1NZlmtuNEsAZkWX2IGX4KCaGAcTbIRASL5NQ6BYDQFt4YerPo B6Cw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=VOxKsTGlBiXPbLWsRjfTqw/sHWeUi1uspD6WChZvBGc=; b=Ihwzew+nh/Y2vrxSdms6jdnFDRk4HSjRZ411gW36Bg4HB6tdh63TjtE6NLc+8F+EtN NAJNeYzG3cX33ZOrQDiS2bpvd22ZsdyRMiG6O/wcXizl19BRXEQ0bg9oDxj3KaptCMa+ JSHNGhszA3AbfxeF1ACL5Tz+6//WRNEnt5L0X97EH37ySW65/3tjnN+12GY2HUomPinQ AiD/kZEpNT7o3Ca2helQK6bwz8+v95pON/GG6+MnLZmyBIMwVsXHquCHe/SvZvMTZ1fM ili51zO7U3XPYzJN+1OoCta7UQ6jUTkTXcOQCjQqlm8OPnz0F50i756pE45N2P20B6Nt kWNg== X-Gm-Message-State: AOAM533bMWJJf044Y25Ml1m0zjJpgDlJ1NPuzLhalBXQkJXrcrXPWgzy mdSBGPOhY3k2WsqvVbXNIWRuapLN+fx54pbm3hZw X-Received: by 2002:a05:6402:1746:b0:418:d816:14e0 with SMTP id v6-20020a056402174600b00418d81614e0mr2016945edx.340.1647480439041; Wed, 16 Mar 2022 18:27:19 -0700 (PDT) MIME-Version: 1.0 References: <20220221212522.320243-1-mic@digikod.net> <20220221212522.320243-11-mic@digikod.net> In-Reply-To: <20220221212522.320243-11-mic@digikod.net> From: Paul Moore Date: Wed, 16 Mar 2022 21:27:07 -0400 Message-ID: Subject: Re: [PATCH v1 10/11] landlock: Document good practices about filesystem policies To: =?UTF-8?B?TWlja2HDq2wgU2FsYcO8bg==?= Cc: James Morris , "Serge E . Hallyn" , Al Viro , Jann Horn , Kees Cook , Konstantin Meskhidze , Shuah Khan , linux-doc@vger.kernel.org, linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, =?UTF-8?B?TWlja2HDq2wgU2FsYcO8bg==?= Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,RDNS_NONE, SPF_HELO_NONE,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, Feb 21, 2022 at 4:15 PM Micka=C3=ABl Sala=C3=BCn = wrote: > > From: Micka=C3=ABl Sala=C3=BCn > > Signed-off-by: Micka=C3=ABl Sala=C3=BCn > Link: https://lore.kernel.org/r/20220221212522.320243-11-mic@digikod.net > --- > Documentation/userspace-api/landlock.rst | 21 +++++++++++++++++++++ > 1 file changed, 21 insertions(+) Reviewed-by: Paul Moore -- paul-moore.com