landlock not works well on FUSE filesystem?

姚平 <[email protected]> Thu, 28 Aug 2025 01:49:08 +0000
Newsgroups dev.linux.lists.landlock
Message-ID <OSQPR06MB7181A053FE55DC0348750713D43BA@OSQPR06MB7181.apcprd06.prod.outlook.com>
SGksIGFsbC4NCg0KSaGvbSB0cnlpbmcgdG8gdXNlIGxhbmRsb2NrIG9uIGFuZHJvaWQgMTUgd2hp
Y2ggdXNlcyBrZXJuZWwgNi42LCBidXQgbWVldCBzb21lIHRyb3VibGVzIHdoZW4gZW5hYmxlIGxh
bmRsb2NrIG9uIGZpbGVzIGluIGZ1c2UgZmlsZXN5c3RlbS4gSGVyZSBpcyB3aGF0IEkgZGlkOg0K
DQpJIHVzZSBodHRwczovL2VsaXhpci5ib290bGluLmNvbS9saW51eC92Ni42LjEwMS9zb3VyY2Uv
c2FtcGxlcy9sYW5kbG9jay9zYW5kYm94ZXIuYyB0byBidWlsZCBhIHNhbmRib3hlciBhbmQgYSB2
ZXJ5IHNpbXBsZSBwcm9ncmFtIHNhbmRib3hlci10ZXN0IGFzIHRoZSBzYW5kYm94ZWQgdGFyZ2V0
Lg0KVGhlIHNpbXBsZSB0YXJnZXQgcHJvZ3JhbSBqdXN0IHJlYWRzIGZpcnN0IGxpbmUgZnJvbSBh
IGZpbGUgYW5kIHdyaXRlcyBhIGxpbmUgdG8gYW5vdGhlciBmaWxlLg0KSSBydW4gdGVzdHMgaW4g
L2RhdGEvbG9jYWwvdG1wIHdpdGggU0VMaW51eCBkaXNhYmxlZC4gSW4gZWFjaCB0ZXN0LCBJIGVu
YWJsZSBMYW5kbG9jayB3aXRoIGEgcnVsZXNldCwgYm90aCBpbmNsdWRpbmcgYW5kIGV4Y2x1ZGlu
ZyB0aGUgZmlsZXBhdGggYmVpbmcgdGVzdGVkLg0KDQpUZXN0MTogdGVzdCBmaWxlcyBvbiAvZGF0
YSwgbGFuZGxvY2sgd29ya3MgbGlrZSBhIGNoYXJtDQo9PT1SdWxlc2V0IGluY2x1ZGVzIHRlc3Rl
ZCBmaWxlczoNCj5MTF9GU19STz0iL2FwZXgvOi9saW5rZXJjb25maWc6L2RhdGEvbG9jYWwvdG1w
L3NhbmRib3g6IiBMTF9GU19SVz0iL2RhdGEvbG9jYWwvdG1wL2ZpbGVzIiAvZGF0YS9sb2NhbC90
bXAvc2FuZGJveGVyIC9kYXRhL2xvY2FsL3RtcC9zYW5kYm94L3NhbmRib3hlci10ZXN0IC9kYXRh
L2xvY2FsL3RtcC9maWxlcy9yby9yZWFkbWUudHh0IC9kYXRhL2xvY2FsL3RtcC9maWxlcy9ydy93
cml0ZW1lLnR4dA0KRmlyc3QgbGluZSBmcm9tIGlucHV0IGZpbGUgJy9kYXRhL2xvY2FsL3RtcC9m
aWxlcy9yby9yZWFkbWUudHh0JzoNCmhlbGxvIHRoZXJlfn5+DQoNCndyaXRlZCB0byBvdXRwdXQg
ZmlsZSAnL2RhdGEvbG9jYWwvdG1wL2ZpbGVzL3J3L3dyaXRlbWUudHh0JzoNCmhlbGxvIHdvcmxk
DQoNCj09PVJ1bGVzZXQgZXhjbHVkZXMgdGVzdCBmaWxlczoNCj4gTExfRlNfUk89Ii9hcGV4Lzov
bGlua2VyY29uZmlnOi9kYXRhL2xvY2FsL3RtcC9zYW5kYm94OiIgTExfRlNfUlc9Ii9kYXRhL2xv
Y2FsL3RtcC9zYW5kYm94IiAvZGF0YS9sb2NhbC90bXAvc2FuZGJveGVyIC9kYXRhL2xvY2FsL3Rt
cC9zYW5kYm94L3NhbmRib3hlci10ZXN0IC9kYXRhL2xvY2FsL3RtcC9maWxlcy9yby9yZWFkbWUu
dHh0IC9kYXRhL2xvY2FsL3RtcC9maWxlcy9ydy93cml0ZW1lLnR4dA0KRXJyb3Igb3BlbmluZyBp
bnB1dCBmaWxlICcvZGF0YS9sb2NhbC90bXAvZmlsZXMvcm8vcmVhZG1lLnR4dCc6IFBlcm1pc3Np
b24gZGVuaWVkDQpFcnJvciBvcGVuaW5nIG91dHB1dCBmaWxlICcvZGF0YS9sb2NhbC90bXAvZmls
ZXMvcncvd3JpdGVtZS50eHQnOiBQZXJtaXNzaW9uIGRlbmllZA0KDQpUZXN0MjogdGVzdCBmaWxl
cyBvbiAvdG1wLCBsYW5kbG9jayB3b3JrcyBsaWtlIGEgY2hhcm0NCj09PVJ1bGVzZXQgaW5jbHVk
ZXMgdGVzdGVkIGZpbGVzOg0KPiBMTF9GU19STz0iL2FwZXgvOi9saW5rZXJjb25maWc6L2RhdGEv
bG9jYWwvdG1wL3NhbmRib3g6IkxMX0ZTX1JXPSIvdG1wIiAvZGF0YS9sb2NhbC90bXAvc2FuZGJv
eGVyIC9kYXRhL2xvY2FsL3RtcC9zYW5kYm94L3NhbmRib3hlci10ZXN0IC90bXAvcm8udHh0IC90
bXAvcncudHh0DQpGaXJzdCBsaW5lIGZyb20gaW5wdXQgZmlsZSAnL3RtcC9yby50eHQnOg0KaGVs
bG8gdGhlcmV+fg0KDQp3cml0ZWQgdG8gb3V0cHV0IGZpbGUgJy90bXAvcncudHh0JzoNCmhlbGxv
IHdvcmxkDQoNCj09PVJ1bGVzZXQgZXhjbHVkZXMgdGVzdCBmaWxlczoNCj4gTExfRlNfUk89Ii9h
cGV4LzovbGlua2VyY29uZmlnOi9kYXRhL2xvY2FsL3RtcC9zYW5kYm94OiJMTF9GU19SVz0iL2Rh
dGEiIC9kYXRhL2xvY2FsL3RtcC9zYW5kYm94ZXIgL2RhdGEvbG9jYWwvdG1wL3NhbmRib3gvc2Fu
ZGJveGVyLXRlc3QgL3RtcC9yby50eHQgL3RtcC9ydy50eHQNCkVycm9yIG9wZW5pbmcgaW5wdXQg
ZmlsZSAnL3RtcC9yby50eHQnOiBQZXJtaXNzaW9uIGRlbmllZA0KRXJyb3Igb3BlbmluZyBvdXRw
dXQgZmlsZSAnL3RtcC9ydy50eHQnOiBQZXJtaXNzaW9uIGRlbmllZA0KDQpUZXN0MzogdGVzdCBm
aWxlcyBvbiAvc3RvcmFnZS9lbXVsYXRlZCwgbGFuZGxvY2sgbm90IHdvcmtzLg0KPT09UnVsZXNl
dCBpbmNsdWRlcyB0ZXN0ZWQgZmlsZXM6DQo+TExfRlNfUk89Ii9hcGV4LzovbGlua2VyY29uZmln
Oi9kYXRhL2xvY2FsL3RtcC9zYW5kYm94OiJMTF9GU19SVz0iL3N0b3JhZ2UvZW11bGF0ZWQvMC9B
bmRyb2lkL2RhdGEvY29tLnZpdm8ubmF0aXZldGVzdC9maWxlcyIgL2RhdGEvbG9jYWwvdG1wL3Nh
bmRib3hlciAvZGF0YS9sb2NhbC90bXAvc2FuZGJveC9zYW5kYm94ZXItdGVzdCAvc3RvcmFnZS9l
bXVsYXRlZC8wL0FuZHJvaWQvZGF0YS9jb20udml2by5uYXRpdmV0ZXN0L2ZpbGVzL3JvLnR4dCAv
c3RvcmFnZS9lbXVsYXRlZC8wL0FuZHJvaWQvZGF0YS9jb20udml2by5uYXRpdmV0ZXN0L2ZpbGVz
L3J3LnR4dA0KRXJyb3Igb3BlbmluZyBpbnB1dCBmaWxlICcvc3RvcmFnZS9lbXVsYXRlZC8wL0Fu
ZHJvaWQvZGF0YS9jb20udml2by5uYXRpdmV0ZXN0L2ZpbGVzL3JvLnR4dCc6IFBlcm1pc3Npb24g
ZGVuaWVkDQpFcnJvciBvcGVuaW5nIG91dHB1dCBmaWxlICcvc3RvcmFnZS9lbXVsYXRlZC8wL0Fu
ZHJvaWQvZGF0YS9jb20udml2by5uYXRpdmV0ZXN0L2ZpbGVzL3J3LnR4dCc6IFBlcm1pc3Npb24g
ZGVuaWVkDQoNCj09PVJ1bGVzZXQgZXhjbHVkZXMgdGVzdGVkIGZpbGVzOg0KPkxMX0ZTX1JPPSIv
YXBleC86L2xpbmtlcmNvbmZpZzovZGF0YS9sb2NhbC90bXAvc2FuZGJveDoiTExfRlNfUlc9Ii9k
YXRhIiAvZGF0YS9sb2NhbC90bXAvc2FuZGJveGVyIC9kYXRhL2xvY2FsL3RtcC9zYW5kYm94L3Nh
bmRib3hlci10ZXN0IC9zdG9yYWdlL2VtdWxhdGVkLzAvQW5kcm9pZC9kYXRhL2NvbS50ZXN0Lm5h
dGl2ZXRlc3QvZmlsZXMvcm8udHh0IC9zdG9yYWdlL2VtdWxhdGVkLzAvQW5kcm9pZC9kYXRhL2Nv
bS50ZXN0Lm5hdGl2ZXRlc3QvZmlsZXMvcncudHh0DQpFcnJvciBvcGVuaW5nIGlucHV0IGZpbGUg
Jy9zdG9yYWdlL2VtdWxhdGVkLzAvQW5kcm9pZC9kYXRhL2NvbS50ZXN0Lm5hdGl2ZXRlc3QvZmls
ZXMvcm8udHh0JzogUGVybWlzc2lvbiBkZW5pZWQNCkVycm9yIG9wZW5pbmcgb3V0cHV0IGZpbGUg
Jy9zdG9yYWdlL2VtdWxhdGVkLzAvQW5kcm9pZC9kYXRhL2NvbS50ZXN0Lm5hdGl2ZXRlc3QvZmls
ZXMvcncudHh0JzogUGVybWlzc2lvbiBkZW5pZWQNCg0KSGVyZSBhcmUgdGhlIG1vdW50IGluZm9z
Og0KDQovZGV2L2Jsb2NrL2RtLTU3IG9uIC9kYXRhIHR5cGUgZjJmcyAocncsbGF6eXRpbWUsc2Vj
bGFiZWwsbm9zdWlkLG5vZGV2LG5vYXRpbWUsYmFja2dyb3VuZF9nYz1vbixub2djX21lcmdlLGRp
c2NhcmQsZGlzY2FyZF91bml0PWJsb2NrLHVzZXJfeGF0dHIsaW5saW5lX3hhdHRyLGFjbCxpbmxp
bmVfZGF0YSxpbmxpbmVfZGVudHJ5LG5vZmx1c2hfbWVyZ2UsYmFycmllcixleHRlbnRfY2FjaGUs
bW9kZT1hZGFwdGl2ZSxhY3RpdmVfbG9ncz02LHJlc2VydmVfcm9vdD0xMzQyMTcscmVzdWlkPTAs
cmVzZ2lkPTEwNjUsaW5saW5lY3J5cHQsYWxsb2NfbW9kZT1kZWZhdWx0LGNoZWNrcG9pbnRfbWVy
Z2UsZnN5bmNfbW9kZT1ub2JhcnJpZXIsY29tcHJlc3NfYWxnb3JpdGhtPXpzdGQ6MSxjb21wcmVz
c19sb2dfc2l6ZT0zLGNvbXByZXNzX21vZGU9dXNlcixjb21wcmVzc19jYWNoZSxtZW1vcnk9bm9y
bWFsLGVycm9ycz1jb250aW51ZSkNCi9kZXYvZnVzZSBvbiAvc3RvcmFnZS9lbXVsYXRlZCB0eXBl
IGZ1c2UgKHJ3LGxhenl0aW1lLG5vc3VpZCxub2Rldixub2V4ZWMsbm9hdGltZSx1c2VyX2lkPTAs
Z3JvdXBfaWQ9MCxhbGxvd19vdGhlcikNCnRtcGZzIG9uIC90bXAgdHlwZSB0bXBmcyAocncsc2Vj
bGFiZWwscmVsYXRpbWUsc2l6ZT01NjA0NzEyayxucl9pbm9kZXM9MTQwMTE3OCkNCg0KQXMgeW91
IGNhbiBzZWUsIHRoZSBvbmx5IGRpZmZlcmVuY2UgaW4gdGhlIDMgdGVzdHMgaXMgdGhlIHRlc3Rl
ZCBmaWxloa9zIGxvY2F0aW9uLiBJoa9tIG5vdCBzdXJlIGlmIHRoaXMgcmVsYXRlZCB0byB0aGUg
ZmlsZXN5c3RlbSB0eXBlIG9yIEkgZGlkIHNvbWV0aGluZyB3cm9uZy4NCg0KQ2FuIHNvbWVvbmUg
aGVscCBtZSB0byBzb2x2ZSB0aGlzIHByb2JsZW0/DQoNCnRoYW5rcyBhIGxvdC4NCg0KX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX18NCrG+08q8/rywxuS4vbz+xNrI3b/JxNy6rNPQu/rD
3LrNL7vy0v7LvdDFz6KjrL32uanWuLaouPbIy7vyu/q5ucq508Oho8j0xPq3x7eivP7Iy9a4tqjK
1bz+yMu78sbktPrA7cjLo6zH687wyrnTw6GitKuypaGiuLTWxrvytOa0orTL08q8/tauyM66zsTa
yN278sbkuL28/qGjyOfE+s7zytWxvtPKvP6jrMfrvLTS1LvYuLS78rXnu7C3vcq9zajWqreivP7I
y6OssqK9q9StyrzTyrz+oaK4vbz+vLDG5Mv509C4tLG+yb6z/aGj0LvQu6GjDQpUaGUgY29udGVu
dHMgb2YgdGhpcyBtZXNzYWdlIGFuZCBhbnkgYXR0YWNobWVudHMgbWF5IGNvbnRhaW4gY29uZmlk
ZW50aWFsIGFuZC9vciBwcml2aWxlZ2VkIGluZm9ybWF0aW9uIGFuZCBhcmUgaW50ZW5kZWQgZXhj
bHVzaXZlbHkgZm9yIHRoZSBhZGRyZXNzZWUocykuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRl
ZCByZWNpcGllbnQgb2YgdGhpcyBtZXNzYWdlIG9yIHRoZWlyIGFnZW50LCBwbGVhc2Ugbm90ZSB0
aGF0IGFueSB1c2UsIGRpc3NlbWluYXRpb24sIGNvcHlpbmcsIG9yIHN0b3JhZ2Ugb2YgdGhpcyBt
ZXNzYWdlIG9yIGl0cyBhdHRhY2htZW50cyBpcyBub3QgYWxsb3dlZC4gSWYgeW91IHJlY2VpdmUg
dGhpcyBtZXNzYWdlIGluIGVycm9yLCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgYnkgcmVwbHkg
dGhlIG1lc3NhZ2Ugb3IgcGhvbmUgYW5kIGRlbGV0ZSB0aGlzIG1lc3NhZ2UsIGFueSBhdHRhY2ht
ZW50cyBhbmQgYW55IGNvcGllcyBpbW1lZGlhdGVseS4NClRoYW5rIHlvdQ0K