samples/landlock: Document best-effort approach for LANDLOCK_ACCESS_FS_REFER
authorGünther Noack <gnoack3000@gmail.com>
Mon, 7 Nov 2022 18:16:51 +0000 (19:16 +0100)
committerMickaël Salaün <mic@digikod.net>
Mon, 7 Nov 2022 19:49:50 +0000 (20:49 +0100)
commitf6e53fb2d7bd70547ba53232415976cb70ad6d97
tree2639fa1d60f9b1082e049667f94df71103ee1be2
parentede2a34363a5dddd5e6b37b8e52c5041d1e78209
samples/landlock: Document best-effort approach for LANDLOCK_ACCESS_FS_REFER

Add a comment to clarify how to handle best-effort backwards
compatibility for LANDLOCK_ACCESS_FS_REFER.

The "refer" access is special because these operations are always
forbidden in ABI 1, unlike most other operations, which are permitted
when using Landlock ABI levels where they are not supported yet.

Signed-off-by: Günther Noack <gnoack3000@gmail.com>
Link: https://lore.kernel.org/r/20221107181651.4555-1-gnoack3000@gmail.com
Signed-off-by: Mickaël Salaün <mic@digikod.net>
samples/landlock/sandboxer.c