enforce_fs
enforce_fs(_metadata, ACCESS_RW, layer1);
enforce_fs(_metadata, ACCESS_RW, layer2);
enforce_fs(_metadata, ACCESS_RW, layer3);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_MAKE_REG, layer1);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_REMOVE_FILE, layer2);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_READ_FILE, layer1_read);
enforce_fs(_metadata,
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_READ_FILE, layer3_read);
enforce_fs(_metadata,
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_READ_FILE, layer5_read);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_EXECUTE, layer6_execute);
enforce_fs(_metadata,
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_READ_FILE, NULL);
enforce_fs(_metadata, ACCESS_RW, rules);
enforce_fs(_metadata, ACCESS_RW, rules);
enforce_fs(_metadata, ACCESS_RW, rules);
enforce_fs(_metadata, ACCESS_RW, rules);
enforce_fs(_metadata, ACCESS_RW, rules);
enforce_fs(_metadata, ACCESS_RW, rules);
enforce_fs(_metadata, ACCESS_RW, rules);
enforce_fs(_metadata, ACCESS_RW, rules);
enforce_fs(_metadata, ACCESS_RW, layer1_base);
enforce_fs(_metadata, rules[0].access, rules);
enforce_fs(_metadata, layer1[0].access, layer1);
enforce_fs(_metadata, layer2[0].access, layer2);
enforce_fs(_metadata, rules[0].access, rules);
enforce_fs(_metadata, rules[0].access, rules);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_REFER, layer1);
enforce_fs(_metadata, layer1[0].access, layer1);
enforce_fs(_metadata, layer2[0].access, layer2);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_MAKE_DIR, NULL);
enforce_fs(_metadata,
enforce_fs(_metadata,
enforce_fs(_metadata,
enforce_fs(_metadata,
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_MAKE_DIR, layer2);
enforce_fs(_metadata,
enforce_fs(_metadata,
enforce_fs(_metadata, rules[0].access, rules);
enforce_fs(_metadata, rules[0].access, rules);
enforce_fs(_metadata, access, rules);
enforce_fs(_metadata, rules[0].access, rules);
enforce_fs(_metadata, rules[0].access, rules);
enforce_fs(_metadata,
enforce_fs(_metadata, rules[0].access, rules);
enforce_fs(_metadata,
enforce_fs(_metadata,
enforce_fs(_metadata, handled1, layer1);
enforce_fs(_metadata, handled2, layer2);
enforce_fs(_metadata, handled3, layer3);
enforce_fs(_metadata, variant->handled, rules);
enforce_fs(_metadata, variant->handled, rules);
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_IOCTL_DEV, NULL);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_IOCTL_DEV, NULL);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_IOCTL_DEV, NULL);
enforce_fs(_metadata, variant->handled, rules);
enforce_fs(_metadata, variant->handled, rules);
enforce_fs(_metadata, variant->handled, rules);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_RESOLVE_UNIX, NULL);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_RESOLVE_UNIX, rules);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_RESOLVE_UNIX,
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_RESOLVE_UNIX,
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_RESOLVE_UNIX, NULL);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_RESOLVE_UNIX, rules);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_RESOLVE_UNIX, NULL);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_RESOLVE_UNIX, rules);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_RESOLVE_UNIX,
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_RESOLVE_UNIX,
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_RESOLVE_UNIX, NULL);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_RESOLVE_UNIX, rules);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_RESOLVE_UNIX, NULL);
enforce_fs(_metadata, ACCESS_RW, layer1_parent);
enforce_fs(_metadata, ACCESS_RW, layer2_mount_point);
enforce_fs(_metadata, ACCESS_RW, layer3_source);
enforce_fs(_metadata, ACCESS_RW, layer4_destination);
enforce_fs(_metadata,
enforce_fs(_metadata, ACCESS_ALL, layer1);
enforce_fs(_metadata, ACCESS_RW, layer1_base);
enforce_fs(_metadata, ACCESS_RW, layer2_data);
enforce_fs(_metadata, ACCESS_RW, layer3_subdirs);
enforce_fs(_metadata, ACCESS_RW, layer4_files);
enforce_fs(_metadata, ACCESS_RW, layer5_merge_only);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_READ_FILE,
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_READ_FILE, NULL);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_EXECUTE, NULL);
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_REFER, NULL);
enforce_fs(_metadata,
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_REFER, layer1);
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, ACCESS_ALL & ~LANDLOCK_ACCESS_FS_READ_FILE, NULL);
enforce_fs(_metadata, ACCESS_ALL, NULL);
enforce_fs(_metadata, LANDLOCK_ACCESS_FS_EXECUTE, NULL);
enforce_fs(_metadata, ACCESS_RW, rules);
enforce_fs(_metadata, ACCESS_RO, rules);
enforce_fs(_metadata, ACCESS_RW, rules);