en Copyright 2015 Java http://172.16.0.5:8080/history/linux-6.15/security/landlock/object.h#06a1c40a landlock: Format with clang-formatLet's follow a consistent and documented coding style. Everything maynot be to our liking but it is better than tacit knowledge. Moreover,this will help maintain style consistency between different developers.This contains only whitespace changes.Automatically formatted with:clang-format-14 -i security/landlock/*.[ch] include/uapi/linux/landlock.hLink: https://lore.kernel.org/r/20220506160513.523257-3-mic@digikod.netCc: stable@vger.kernel.orgSigned-off-by: Mickaël Salaün <mic@digikod.net> List of files: /linux-6.15/security/landlock/object.h Fri, 06 May 2022 16:05:08 +0000 Mickaël Salaün <mic@digikod.net> http://172.16.0.5:8080/history/linux-6.15/security/landlock/object.h#90945448 landlock: Add object managementA Landlock object enables to identify a kernel object (e.g. an inode).A Landlock rule is a set of access rights allowed on an object. Rulesare grouped in rulesets that may be tied to a set of processes (i.e.subjects) to enforce a scoped access-control (i.e. a domain).Because Landlock's goal is to empower any process (especiallyunprivileged ones) to sandbox themselves, we cannot rely on asystem-wide object identification such as file extended attributes.Indeed, we need innocuous, composable and modular access-controls.The main challenge with these constraints is to identify kernel objectswhile this identification is useful (i.e. when a security policy makesuse of this object). But this identification data should be freed onceno policy is using it. This ephemeral tagging should not and may not bewritten in the filesystem. We then need to manage the lifetime of arule according to the lifetime of its objects. To avoid a global lock,this implementation make use of RCU and counters to safely referenceobjects.A following commit uses this generic object management for inodes.Cc: James Morris <jmorris@namei.org>Signed-off-by: Mickaël Salaün <mic@linux.microsoft.com>Reviewed-by: Jann Horn <jannh@google.com>Acked-by: Serge Hallyn <serge@hallyn.com>Reviewed-by: Kees Cook <keescook@chromium.org>Link: https://lore.kernel.org/r/20210422154123.13086-2-mic@digikod.netSigned-off-by: James Morris <jamorris@linux.microsoft.com> List of files: /linux-6.15/security/landlock/object.h Thu, 22 Apr 2021 15:41:11 +0000 Mickaël Salaün <mic@linux.microsoft.com>