Dynamic/USB device support (mechanism to handle changing inodes)

Hi  all,

Landlock currently works fine initially to grant sandboxed applications 
access to USB devices, such as a serial device like /dev/ttyACM0. But 
when the device resets itself or is unplugged and replugged, it gets a 
new inode, and Landlock blocks access because the rule was bound to the 
old inode.

Would it be possible to support rules with respect to dynamic devices 
that change inodes? It may required path-based rules or a mechanism for 
updatable rulesets? Or do you have any other suggestions?

Currently, the only workaround is to grant full access to /dev which is 
not ideal as the sandboxed applicaion can then access sensitive 
information or escalate privileges via /dev/pts or /dev/tty.

Thank you
Leonard