landlock: Document LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS

Browse source

Document setting no_new_privs with ruleset enforcement, following the
same compatibility section style as previous ABI additions.

Include a section explaining the tradeoffs of setting no_new_privs
through any means for privileged users of Landlock.

Signed-off-by: Justin Suess <utilityemal77@gmail.com>
Link: https://patch.msgid.link/20260809154544.1253100-5-utilityemal77@gmail.com
Signed-off-by: Mickaël Salaün <mic@digikod.net>

...

This commit is contained in:

Justin Suess 2026-08-09 11:45:22 -04:00 • committed by Mickaël Salaün

parent 71f98bc6e5

commit f2c55c76bd

No known key found for this signature in database

GPG key ID: E5E3D0E88C82F6D2

1 changed files with 40 additions and 5 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

45

Documentation/userspace-api/landlock.rst

View file