Directory Files
.. 9
File Size
Kconfig 905 B
Makefile 123 B
common.h 423 B
cred.c 1.1 kB
cred.h 1.3 kB
fs.c 42 kB
fs.h 3.0 kB
limits.h 729 B
object.c 1.8 kB
object.h 2.8 kB
ptrace.c 3.2 kB
ptrace.h 334 B
ruleset.c 12 kB
ruleset.h 5.3 kB
setup.c 988 B
setup.h 418 B
syscalls.c 13 kB

Linux v6.6.1 - landlock

# SPDX-License-Identifier: GPL-2.0-only

config SECURITY_LANDLOCK
	bool "Landlock support"
	depends on SECURITY
	select SECURITY_PATH
	help
	  Landlock is a sandboxing mechanism that enables processes to restrict
	  themselves (and their future children) by gradually enforcing
	  tailored access control policies.  A Landlock security policy is a
	  set of access rights (e.g. open a file in read-only, make a
	  directory, etc.) tied to a file hierarchy.  Such policy can be
	  configured and enforced by any processes for themselves using the
	  dedicated system calls: landlock_create_ruleset(),
	  landlock_add_rule(), and landlock_restrict_self().

	  See Documentation/userspace-api/landlock.rst for further information.

	  If you are unsure how to answer this question, answer N.  Otherwise,
	  you should also prepend "landlock," to the content of CONFIG_LSM to
	  enable Landlock at boot time.