LANDLOCK_ACCESS_FS_REFER
LANDLOCK_ACCESS_FS_REFER | \
ruleset_attr.handled_access_fs &= ~LANDLOCK_ACCESS_FS_REFER;
LANDLOCK_ACCESS_FS_REFER)
[BIT_INDEX(LANDLOCK_ACCESS_FS_REFER)] = "fs.refer",
access_request_parent1 |= LANDLOCK_ACCESS_FS_REFER;
access_request_parent2 |= LANDLOCK_ACCESS_FS_REFER;
~LANDLOCK_ACCESS_FS_REFER)
IE_FALSE(&masks, LANDLOCK_ACCESS_FS_REFER);
.access[0] = LANDLOCK_ACCESS_FS_REFER,
IE_FALSE(&masks, LANDLOCK_ACCESS_FS_REFER);
IE_FALSE(&masks, LANDLOCK_ACCESS_FS_REFER);
.access = LANDLOCK_ACCESS_FS_REFER,
.access = LANDLOCK_ACCESS_FS_REFER,
create_ruleset(_metadata, LANDLOCK_ACCESS_FS_REFER, layer1);
.access = LANDLOCK_ACCESS_FS_REFER,
.access = LANDLOCK_ACCESS_FS_REFER |
.access = LANDLOCK_ACCESS_FS_REFER |
LANDLOCK_ACCESS_FS_REFER |
.access = LANDLOCK_ACCESS_FS_REFER,
.access = LANDLOCK_ACCESS_FS_REFER,
LANDLOCK_ACCESS_FS_MAKE_REG | LANDLOCK_ACCESS_FS_REFER, layer1);
.access = LANDLOCK_ACCESS_FS_REFER,
.access = LANDLOCK_ACCESS_FS_REFER,
LANDLOCK_ACCESS_FS_MAKE_REG | LANDLOCK_ACCESS_FS_REFER, layer1);
.access = LANDLOCK_ACCESS_FS_REFER,
.access = LANDLOCK_ACCESS_FS_REFER,
LANDLOCK_ACCESS_FS_MAKE_REG | LANDLOCK_ACCESS_FS_REFER, layer1);
.access = LANDLOCK_ACCESS_FS_REFER |
.access = LANDLOCK_ACCESS_FS_REFER |
LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_REMOVE_DIR |
.access = LANDLOCK_ACCESS_FS_REFER,
.access = LANDLOCK_ACCESS_FS_REFER |
LANDLOCK_ACCESS_FS_REFER |
.access = LANDLOCK_ACCESS_FS_REFER,
LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_EXECUTE, layer1);
.access = LANDLOCK_ACCESS_FS_REFER |
.access = LANDLOCK_ACCESS_FS_REFER |
.access = LANDLOCK_ACCESS_FS_REFER |
.access = LANDLOCK_ACCESS_FS_REFER |
.allowed_s1d1 = LANDLOCK_ACCESS_FS_REFER |
.allowed_s1d2 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_READ_FILE,
path_beneath.allowed_access |= LANDLOCK_ACCESS_FS_REFER;
.allowed_s1d2 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_MAKE_REG,
.allowed_s1d31 = LANDLOCK_ACCESS_FS_REFER |
.allowed_s1d32 = LANDLOCK_ACCESS_FS_REFER |
.allowed_s1d41 = LANDLOCK_ACCESS_FS_REFER |
.allowed_s1d42 = LANDLOCK_ACCESS_FS_REFER |
path_beneath.allowed_access &= ~LANDLOCK_ACCESS_FS_REFER;
.allowed_s1d41 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_MAKE_REG,
.allowed_s1d42 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_MAKE_REG,
.allowed_s1d41 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_MAKE_REG,
.allowed_s1d42 = LANDLOCK_ACCESS_FS_REFER |
.allowed_s1d41 = LANDLOCK_ACCESS_FS_REFER |
.allowed_s1d42 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_MAKE_REG,
.allowed_s2d1 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_READ_FILE,
.allowed_s2d1 = LANDLOCK_ACCESS_FS_REFER |
.allowed_s2d2 = LANDLOCK_ACCESS_FS_REFER |
.allowed_s3d1 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_READ_FILE,
.allowed_s4d1 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_READ_FILE,
.allowed_s3d1 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_MAKE_REG,
.allowed_s4d1 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_MAKE_REG,
.allowed_s3d1 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_MAKE_REG,
.allowed_s4d1 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_MAKE_REG |
.allowed_s3d1 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_MAKE_REG |
.allowed_s4d1 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_MAKE_REG,
LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_READ_FILE |
.allowed_s1d1 = LANDLOCK_ACCESS_FS_REFER |
.allowed_s1d2 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_READ_FILE,
LANDLOCK_ACCESS_FS_REFER)
.allowed_s1d2 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_MAKE_REG,
.allowed_s1d3 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_READ_FILE,
.allowed_s1d3 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_MAKE_REG,
.allowed_s1d3 = LANDLOCK_ACCESS_FS_REFER |
.allowed_s2d1 = LANDLOCK_ACCESS_FS_REFER |
.allowed_s2d2 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_READ_FILE,
.allowed_s2d2 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_MAKE_REG,
.allowed_s2d3 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_READ_FILE,
.allowed_s2d3 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_MAKE_REG,
.allowed_s2d4 = LANDLOCK_ACCESS_FS_REFER |
.allowed_s3d1 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_READ_FILE,
.allowed_s3d1 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_MAKE_REG,
.allowed_s3d2 = LANDLOCK_ACCESS_FS_REFER |
.allowed_s4d1 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_READ_FILE,
.allowed_s4d1 = LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_MAKE_REG,
LANDLOCK_ACCESS_FS_REFER | LANDLOCK_ACCESS_FS_READ_FILE |
LANDLOCK_ACCESS_FS_REFER |
LANDLOCK_ACCESS_FS_REFER,
LANDLOCK_ACCESS_FS_REFER,
.access = LANDLOCK_ACCESS_FS_REFER,
create_ruleset(_metadata, LANDLOCK_ACCESS_FS_REFER, layer1);