access_masks
static inline struct access_masks
landlock_upgrade_handled_access_masks(struct access_masks access_masks)
if (access_masks.fs)
access_masks.fs |= _LANDLOCK_ACCESS_FS_INITIALLY_DENIED;
return access_masks;
struct access_masks masks;
const struct access_masks access_masks)
return access_masks.fs;
return access_masks.net;
const struct access_masks masks,
.masks = domain->access_masks[layer_level],
struct access_masks quiet_masks;
static const struct access_masks fs_resolve_unix = {
static const struct access_masks signal_scope = {
static const struct access_masks any_fs = {
const struct access_masks masks = {
const struct access_masks bind_udp = {
const struct access_masks masks = {
new_ruleset = kzalloc_flex(*new_ruleset, access_masks, num_layers,
dst->access_masks[dst->num_layers - 1] =
landlock_upgrade_handled_access_masks(src->access_masks[0]);
memcpy(child->access_masks, parent->access_masks,
flex_array_size(parent, access_masks, parent->num_layers));
struct access_masks quiet_masks;
struct access_masks access_masks[];
static inline struct access_masks
.masks = domain->access_masks[layer_level],
ruleset->access_masks[layer_level].fs |= fs_mask;
ruleset->access_masks[layer_level].net |= net_mask;
ruleset->access_masks[layer_level].scope |= mask;
return ruleset->access_masks[layer_level].fs |
return ruleset->access_masks[layer_level].net;
return ruleset->access_masks[layer_level].scope;
mask = ruleset->access_masks[0].fs;
static const struct access_masks unix_scope = {
static const struct access_masks signal_scope = {