Feature Request: Support Landlock rules on FUSE filesystems with backing files
姚平 <[email protected]> Mon, 20 Jul 2026 02:56:04 +0000
| Newsgroups | dev.linux.lists.landlock |
|---|---|
| Message-ID | <OSQPR06MB71812EAF67B6A65D85918F62D4C32@OSQPR06MB7181.apcprd06.prod.outlook.com> |
IyBGZWF0dXJlIFJlcXVlc3Q6IFN1cHBvcnQgTGFuZGxvY2sgcnVsZXMgb24gRlVTRSBmaWxlc3lz dGVtcyB3aXRoIGJhY2tpbmcgZmlsZXMNCg0KIyMgQmFja2dyb3VuZA0KDQpGVVNFIGFsbG93cyB1 c2Vyc3BhY2UgZGFlbW9ucyB0byBpbXBsZW1lbnQgZmlsZXN5c3RlbXMuIEluIHNvbWUgY29uZmln dXJhdGlvbnMsIGEgRlVTRSBkYWVtb24gbWF5IHNldCB1cCBhICoqYmFja2luZyBmaWxlKiogoaog YSBmaWxlIGRlc2NyaXB0b3IgcG9pbnRpbmcgdG8gYSBsb3dlciBmaWxlc3lzdGVtIChlLmcuLCBl eHQ0LCBmMmZzKSChqiBzbyB0aGF0IHN1YnNlcXVlbnQgSS9PIG9uIGNlcnRhaW4gRlVTRSBpbm9k ZXMgaXMgcmVkaXJlY3RlZCBkaXJlY3RseSB0byB0aGUgYmFja2luZyBmaWxlc3lzdGVtLCBieXBh c3NpbmcgdGhlIEZVU0UgZGFlbW9uLiBUaGlzIG1lY2hhbmlzbSBleGlzdHMgaW4gdHdvIGZvcm1z Og0KDQoxLiAqKlVwc3RyZWFtIEZVU0UgcGFzc3Rocm91Z2gqKiAoTGludXggNi45Kyk6IFRoZSBG VVNFIGRhZW1vbiBjYWxscyBgZnVzZV9wYXNzdGhyb3VnaF9vcGVuKClgIHRvIGFzc29jaWF0ZSBh IGJhY2tpbmcgZmlsZSB3aXRoIGEgRlVTRSBmaWxlLCBlbmFibGluZyBkaXJlY3QgSS9PIG9uIHRo ZSBiYWNraW5nIGlub2RlLg0KDQoyLiAqKkFuZHJvaWQgRlVTRS1CUEYqKiAoQW5kcm9pZCBDb21t b24gS2VybmVsIGV4dGVuc2lvbik6IER1cmluZyBGVVNFIGxvb2t1cCwgdGhlIGRhZW1vbiBwcm92 aWRlcyBhIGBiYWNraW5nX2ZkYCBmb3IgY2VydGFpbiBkaXJlY3RvcmllcywgYW5kIHRoZSBrZXJu ZWwgRlVTRS1CUEYgZHJpdmVyIHJlZGlyZWN0cyBhbGwgc3Vic2VxdWVudCBJL08gb24gdGhvc2Ug RlVTRSBpbm9kZXMgdG8gdGhlIGJhY2tpbmcgZmlsZXN5c3RlbS4NCg0KSW4gYm90aCBjYXNlcywg dGhlIHVzZXIgcHJvY2VzcyBpbnRlcmFjdHMgd2l0aCB0aGUgRlVTRSBwYXRoIChlLmcuLCBgL21u dC9mdXNlL2Zvby9maWxlLnR4dGApLCBidXQgdGhlIGFjdHVhbCBJL08gb3BlcmF0ZXMgb24gdGhl IGJhY2tpbmcgZmlsZXN5c3RlbSdzIGlub2RlIChlLmcuLCBhbiBleHQ0IGlub2RlKS4gVGhpcyBj cmVhdGVzIGEgKipzcGxpdCBiZXR3ZWVuIHRoZSBwYXRoIHRoZSB1c2VyIHNlZXMgYW5kIHRoZSBp bm9kZSB0aGF0IExhbmRsb2NrIGNoZWNrcyoqLg0KDQojIyBQcm9ibGVtDQoNCkxhbmRsb2NrIHJ1 bGVzIGVzdGFibGlzaGVkIG9uIEZVU0UgcGF0aHMgYmVjb21lICoqaW5lZmZlY3RpdmUqKiB3aGVu IGEgYmFja2luZyBmaWxlIGlzIGluIHVzZSBhbmQgdGhlIHVzZXIgcHJvY2VzcyBkb2VzIG5vdCBo YXZlIGFjY2VzcyB0byB0aGUgYmFja2luZyBwYXRoLg0KDQoqKlJ1bGUgZXN0YWJsaXNobWVudCoq OiBBIHNhbmRib3hlZCBwcm9jZXNzIG9wZW5zIHRoZSBGVVNFIHBhdGggd2l0aCBgb3BlbihPX1BB VEgpYCBhbmQgcmVnaXN0ZXJzIGl0IHZpYSBgbGFuZGxvY2tfYWRkX3J1bGUoTEFORExPQ0tfUlVM RV9QQVRIX0JFTkVBVEgpYC4gVGhlIHJ1bGUgaXMgYm91bmQgdG8gdGhlICoqRlVTRSBpbm9kZSoq IChlLmcuLCBgZnVzZV9kZXY6aW5vPVlgKS4NCg0KKipBY3R1YWwgSS9PKio6IFdoZW4gdGhlIHBy b2Nlc3MgYWNjZXNzZXMgYSBmaWxlIHVuZGVyIHRoYXQgcGF0aCwgdGhlIGtlcm5lbCByZWRpcmVj dHMgdGhlIEkvTyB0byB0aGUgKipiYWNraW5nIGZpbGVzeXN0ZW0gaW5vZGUqKiAoZS5nLiwgYGV4 dDRfZGV2Omlubz1aYCkgdmlhIHRoZSBiYWNraW5nIGZpbGUuIExhbmRsb2NrJ3MgYGhvb2tfZmls ZV9vcGVuYCBjaGVja3MgdGhlIGV4dDQgaW5vZGUncyBhbmNlc3RvciBjaGFpbiwgYnV0IHRoZSBy dWxlIGlzIGJvdW5kIHRvIHRoZSBGVVNFIGlub2RlIKGqIHdoaWNoICoqZG9lcyBub3QgYXBwZWFy KiogaW4gdGhlIGV4dDQgaW5vZGUgYW5jZXN0b3IgY2hhaW4uIFRoZSBydWxlIG5ldmVyIG1hdGNo ZXMsIHJlc3VsdGluZyBpbiAqKkRFTlkgcmVnYXJkbGVzcyBvZiB3aGV0aGVyIHRoZSBwYXRoIGlz IGluY2x1ZGVkIGluIHRoZSBydWxlc2V0KiouDQoNCmBgYA0KUnVsZSBlc3RhYmxpc2htZW50Og0K ICBvcGVuKCIvbW50L2Z1c2UvZGF0YS8iLCBPX1BBVEgpDQogICAgLT4gRlVTRSBsb29rdXAgLT4g RlVTRSBkYWVtb24gbWF5IHNldCBiYWNraW5nX2ZkDQogICAgLT4gcmV0dXJucyBGVVNFIGlub2Rl IFkNCiAgbGFuZGxvY2tfYWRkX3J1bGUoKSAtPiBydWxlIGJvdW5kIHRvIEZVU0UgaW5vZGUgWQ0K DQpBY3R1YWwgSS9POg0KICBvcGVuKCIvbW50L2Z1c2UvZGF0YS9maWxlLmRhdCIpDQogICAgLT4g a2VybmVsIHJlZGlyZWN0cyB0byBleHQ0IGlub2RlIFogdmlhIGJhY2tpbmcgZmlsZQ0KICAgIC0+ IExhbmRsb2NrIGNoZWNrcyBleHQ0IGlub2RlIFoncyBhbmNlc3RvciBjaGFpbg0KICAgIC0+IEZV U0UgaW5vZGUgWSBub3QgZm91bmQgaW4gZXh0NCBpbm9kZSBjaGFpbg0KICAgIC0+IERFTlkgKEVB Q0NFUykNCmBgYA0KDQpUaGlzIGFmZmVjdHMgYW55IEZVU0UgY29uZmlndXJhdGlvbiB3aGVyZSBi YWNraW5nIGZpbGVzIGFyZSB1c2VkLiBOb24tYmFja2VkIEZVU0UgcGF0aHMgd29yayBjb3JyZWN0 bHkgYmVjYXVzZSBhbGwgSS9PIHN0YXlzIHdpdGhpbiB0aGUgRlVTRSBmaWxlc3lzdGVtIKGqIHRo ZSBydWxlIGlub2RlIGFuZCBJL08gaW5vZGUgYmVsb25nIHRvIHRoZSBzYW1lIGZpbGVzeXN0ZW0g aW5zdGFuY2UuDQoNCiMjIyBUaGUgY29yZSBpc3N1ZTogdXNlciBjYW5ub3Qgc2V0IHJ1bGVzIG9u IHRoZSBiYWNraW5nIHBhdGgNCg0KQSBuYXR1cmFsIHdvcmthcm91bmQgd291bGQgYmUgdG8gYWRk IExhbmRsb2NrIHJ1bGVzIGZvciAqKmJvdGgqKiB0aGUgRlVTRSBwYXRoIGFuZCB0aGUgYmFja2lu ZyBwYXRoLiBIb3dldmVyLCB0aGlzIHJlcXVpcmVzIHRoZSB1c2VyIHByb2Nlc3MgdG8gYG9wZW4o T19QQVRIKWAgdGhlIGJhY2tpbmcgcGF0aCwgd2hpY2ggbWF5IG5vdCBiZSBwb3NzaWJsZToNCg0K LSBUaGUgYmFja2luZyBwYXRoIG1heSByZXNpZGUgaW4gYSBkaXJlY3RvcnkgdGhhdCB0aGUgdXNl ciBwcm9jZXNzIGNhbm5vdCB0cmF2ZXJzZSBkdWUgdG8gKipEQUMgcGVybWlzc2lvbnMqKiAoZS5n LiwgdGhlIGJhY2tpbmcgZGlyZWN0b3J5IGlzIGBkcnd4cndzLS0tIG93bmVyIGdyb3VwYCwgYW5k IHRoZSB1c2VyIGlzIG5laXRoZXIgdGhlIG93bmVyIG5vciBpbiB0aGUgZ3JvdXApLg0KLSBUaGUg RlVTRSBkYWVtb24gaXMgdHlwaWNhbGx5IGEgcHJpdmlsZWdlZCBwcm9jZXNzIHRoYXQgY2FuIGFj Y2VzcyB0aGUgYmFja2luZyBwYXRoLCBidXQgdGhlIHNhbmRib3hlZCBwcm9jZXNzIGlzIG5vdC4N Cg0KVGhpcyBpcyBub3QgYW4gZWRnZSBjYXNlIKGqIGl0IGlzIHRoZSAqKmV4cGVjdGVkIGRlc2ln bioqIG9mIEZVU0Ugd2l0aCBiYWNraW5nIGZpbGVzOiB0aGUgRlVTRSBkYWVtb24gYWN0cyBhcyBh IHByaXZpbGVnZWQgaW50ZXJtZWRpYXJ5LCBleHBvc2luZyBmaWxlcyB2aWEgdGhlIEZVU0UgbW91 bnQgd2hpbGUga2VlcGluZyB0aGUgYmFja2luZyBwYXRoIGluYWNjZXNzaWJsZSB0byB1bnByaXZp bGVnZWQgcHJvY2Vzc2VzLiBMYW5kbG9jaydzIGN1cnJlbnQgYmVoYXZpb3IgYnJlYWtzIHRoaXMg bW9kZWw6IHRoZSB1c2VyIGNhbiBvbmx5IHNldCBydWxlcyBvbiB0aGUgRlVTRSBwYXRoIHRoZXkg Y2FuIHNlZSwgYnV0IExhbmRsb2NrIGNoZWNrcyB0aGUgYmFja2luZyBpbm9kZSB0aGV5IGNhbm5v dCBhY2Nlc3MuDQoNCiMjIyBDb25jcmV0ZSBleGFtcGxlOiBBbmRyb2lkIEZVU0UtQlBGDQoNCkFu ZHJvaWQncyBNZWRpYVByb3ZpZGVyIHVzZXMgRlVTRSB0byBleHBvc2UgYC9zdG9yYWdlL2VtdWxh dGVkLzAvYCB0byBhcHBsaWNhdGlvbnMuIE9uIGRldmljZXMgd2l0aCBGVVNFLUJQRiBzdXBwb3J0 IFthbmRyb2lkIDE3LCBrZXJuZWwgNi4xOF0sIHRoZSBkYWVtb24gc2V0cyBgYmFja2luZ19mZGAg Zm9yIGBBbmRyb2lkL2RhdGEve3BrZ30vYCBhbmQgYEFuZHJvaWQvb2JiL3twa2d9L2AgZGlyZWN0 b3JpZXMsIHJlZGlyZWN0aW5nIEkvTyB0byBgL2RhdGEvbWVkaWEvMC9BbmRyb2lkL2RhdGEve3Br Z30vYCBvbiBleHQ0L2YyZnMuDQoNClRoZSBiYWNraW5nIHBhdGggYC9kYXRhL21lZGlhLzAvYCBo YXMgREFDIHBlcm1pc3Npb25zIGBkcnd4cndzLS0tIG1lZGlhX3J3IG1lZGlhX3J3YCAoNzcwKS4g T3JkaW5hcnkgYXBwcyBhcmUgbmVpdGhlciB0aGUgb3duZXIgbm9yIGluIHRoZSBgbWVkaWFfcndg IGdyb3VwLCBzbyB0aGV5IGxhY2sgdGhlIGB4YCAodHJhdmVyc2UpIHBlcm1pc3Npb24gcmVxdWly ZWQgZm9yIHBhdGggcmVzb2x1dGlvbi4gYG9wZW4oIi9kYXRhL21lZGlhLzAvLi4uIiwgT19QQVRI KWAgZmFpbHMgd2l0aCBgRUFDQ0VTYC4gKFNFTGludXggcG9saWN5IGRvZXMgYWxsb3cgYHVudHJ1 c3RlZF9hcHBfYWxsYCB0byBhY2Nlc3MgYG1lZGlhX3J3X2RhdGFfZmlsZWAgoaogREFDIGlzIHRo ZSBhY3R1YWwgYmxvY2tlci4pDQoNClRoaXMgbWVhbnMgdGhlIGR1YWwtcGF0aCB3b3JrYXJvdW5k IG9ubHkgd29ya3MgZm9yIHByaXZpbGVnZWQgcHJvY2Vzc2VzICh0aGUgRlVTRSBkYWVtb24gaXRz ZWxmLCByb290KSwgYnV0IG5vdCBmb3Igb3JkaW5hcnkgdW5wcml2aWxlZ2VkIHByb2Nlc3NlcyCh qiB3aGljaCBpcyBleGFjdGx5IHRoZSB1c2UgY2FzZSB3aGVyZSBMYW5kbG9jayBpcyBtb3N0IHZh bHVhYmxlLg0KDQojIyBQb3NzaWJsZSBzb2x1dGlvbiBkaXJlY3Rpb24NCg0KT25lIHBvc3NpYmxl IGFwcHJvYWNoOiB3aGVuIExhbmRsb2NrJ3MgYWNjZXNzIGNoZWNrIG9uIHRoZSBiYWNraW5nIGlu b2RlIGNoYWluIGZhaWxzLCBmYWxsIGJhY2sgdG8gY2hlY2tpbmcgdGhlIGNvcnJlc3BvbmRpbmcg KipGVVNFIHZpcnR1YWwgcGF0aCoqIGlmIHRoZSBmaWxlIHdhcyBvcGVuZWQgdGhyb3VnaCBhIEZV U0UgYmFja2luZyBtZWNoYW5pc20uIFRoaXMgd291bGQgcmVxdWlyZSB0aGUgRlVTRSBsYXllciB0 byByZWNvcmQgdGhlIHZpcnR1YWwgcGF0aCBhc3NvY2lhdGVkIHdpdGggYSBiYWNrZWQgaW5vZGUs IGFuZCBleHBvc2UgYSBoZWxwZXIgZm9yIExhbmRsb2NrIHRvIHJldHJpZXZlIGl0Lg0KDQpUaGlz IGFwcHJvYWNoIHdvdWxkIHJlcXVpcmUgKipubyB1c2Vyc3BhY2UgQVBJIGNoYW5nZXMqKiChqiBl eGlzdGluZyBMYW5kbG9jayB1c2Vyc3BhY2UgY29kZSB3b3VsZCBjb250aW51ZSB0byB3b3JrIHVu Y2hhbmdlZCwgYXMgdGhlIHByb2Nlc3Mgb25seSBldmVyIGludGVyYWN0cyB3aXRoIEZVU0UgcGF0 aHMuDQoNClRoZSBrZXkgcHJpbmNpcGxlIGlzIHRoYXQgdXNlcnMgc2hvdWxkIG9ubHkgbmVlZCB0 byB0aGluayBhYm91dCB0aGUgZmlsZSBoaWVyYXJjaGllcyB0aGV5IGNhbiBzZWUgKHRoZSBGVVNF IHBhdGhzKSwgYW5kIHRoZSBrZXJuZWwgc2hvdWxkIHRyYW5zcGFyZW50bHkgaGFuZGxlIHRoZSBi YWNraW5nIGZpbGVzeXN0ZW0gbWFwcGluZyChqiBjb25zaXN0ZW50IHdpdGggTGFuZGxvY2sncyBk b2N1bWVudGVkIGd1aWRhbmNlIHRoYXQgIkxhbmRsb2NrIHVzZXJzIHNob3VsZCB0aGVuIG9ubHkg dGhpbmsgYWJvdXQgZmlsZSBoaWVyYXJjaGllcyB0aGV5IHdhbnQgdG8gYWxsb3cgYWNjZXNzIHRv LCByZWdhcmRsZXNzIG9mIHRoZSB1bmRlcmx5aW5nIGZpbGVzeXN0ZW0uIg0KDQpfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXw0Ksb7Tyrz+vLDG5Li9vP7E2sjdv8nE3Lqs09C7+sPcus0v u/LS/su90MXPoqOsvfa5qda4tqi49sjLu/K7+rm5yrnTw6GjyPTE+rfHt6K8/sjL1ri2qMrVvP7I y7vyxuS0+sDtyMujrMfrzvDKudPDoaK0q7KloaK4tNbGu/K05rSitMvTyrz+1q7IzrrOxNrI3bvy xuS4vbz+oaPI58T6zvPK1bG+08q8/qOsx+u8tNLUu9i4tLvytee7sLe9yr3NqNaqt6K8/sjLo6yy or2r1K3KvNPKvP6hori9vP68sMbky/nT0Li0sb7JvrP9oaPQu9C7oaMNClRoZSBjb250ZW50cyBv ZiB0aGlzIG1lc3NhZ2UgYW5kIGFueSBhdHRhY2htZW50cyBtYXkgY29udGFpbiBjb25maWRlbnRp YWwgYW5kL29yIHByaXZpbGVnZWQgaW5mb3JtYXRpb24gYW5kIGFyZSBpbnRlbmRlZCBleGNsdXNp dmVseSBmb3IgdGhlIGFkZHJlc3NlZShzKS4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJl Y2lwaWVudCBvZiB0aGlzIG1lc3NhZ2Ugb3IgdGhlaXIgYWdlbnQsIHBsZWFzZSBub3RlIHRoYXQg YW55IHVzZSwgZGlzc2VtaW5hdGlvbiwgY29weWluZywgb3Igc3RvcmFnZSBvZiB0aGlzIG1lc3Nh Z2Ugb3IgaXRzIGF0dGFjaG1lbnRzIGlzIG5vdCBhbGxvd2VkLiBJZiB5b3UgcmVjZWl2ZSB0aGlz IG1lc3NhZ2UgaW4gZXJyb3IsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBieSByZXBseSB0aGUg bWVzc2FnZSBvciBwaG9uZSBhbmQgZGVsZXRlIHRoaXMgbWVzc2FnZSwgYW55IGF0dGFjaG1lbnRz IGFuZCBhbnkgY29waWVzIGltbWVkaWF0ZWx5Lg0KVGhhbmsgeW91DQo=