Re: [PATCH v3 03/20] landlock: Split struct landlock_domain from struct landlock_ruleset
Justin Suess <[email protected]> Wed, 22 Jul 2026 17:12:18 -0400
| Newsgroups | org.kernel.vger.linux-security-module,org.kernel.vger.linux-trace-kernel |
|---|---|
| Message-ID | <amEwEUKyCPNUxITb@zenbox> |
On Wed, Jul 22, 2026 at 07:11:35PM +0200, Mickaël Salaün wrote: > Switch all domain users to the new struct landlock_domain type > introduced by a previous commit, eliminating the conflation between > mutable rulesets and immutable domains. landlock_merge_ruleset() now > returns and allocates a struct landlock_domain, and the merge and > inherit helpers move next to it; the former static insert_rule() is > exported as landlock_rule_insert() for its new caller across the > translation-unit boundary. > Seems a little confusing that we have landlock_rule_insert() and landlock_insert_rule() Maybe a rename of one these would be appropriate? Otherwise looks good :) Justin > [...]