Re: [PATCH v3 03/20] landlock: Split struct landlock_domain from struct landlock_ruleset
Mickaël Salaün <[email protected]> Thu, 6 Aug 2026 19:41:49 +0200
| Newsgroups | org.kernel.vger.linux-trace-kernel,org.kernel.vger.linux-security-module |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Jul 22, 2026 at 05:12:18PM -0400, Justin Suess wrote: > On Wed, Jul 22, 2026 at 07:11:35PM +0200, Mickaël Salaün wrote: > > Switch all domain users to the new struct landlock_domain type > > introduced by a previous commit, eliminating the conflation between > > mutable rulesets and immutable domains. landlock_merge_ruleset() now > > returns and allocates a struct landlock_domain, and the merge and > > inherit helpers move next to it; the former static insert_rule() is > > exported as landlock_rule_insert() for its new caller across the > > translation-unit boundary. > > > Seems a little confusing that we have > > landlock_rule_insert() (the new one) > > and > > landlock_insert_rule() (the existing one) > > Maybe a rename of one these would be appropriate? It's indeed confusing... What about landlock_store_rule()? I couldn't find anything better given the already taken names. > > Otherwise looks good :) > > Justin > > [...] >