landlock: Document good practices about filesystem policies
authorMickaël Salaün <mic@digikod.net>
Fri, 6 May 2022 16:11:01 +0000 (18:11 +0200)
committerMickaël Salaün <mic@digikod.net>
Mon, 23 May 2022 11:28:01 +0000 (13:28 +0200)
commit09340cf4135f942d56742b36aaa3c37738aba000
treece6655b5ebeeb899e291374c94fa81d839527e75
parent6f59abfae35fbbe688ff790ff9638576956d760c
landlock: Document good practices about filesystem policies

Explain how to set access rights per hierarchy in an efficient and safe
way, especially with the LANDLOCK_ACCESS_FS_REFER side effect (i.e.
partial ordering and constraints for access rights per hierarchy).

Reviewed-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Mickaël Salaün <mic@digikod.net>
Link: https://lore.kernel.org/r/20220506161102.525323-12-mic@digikod.net
Documentation/userspace-api/landlock.rst