It is not mandatory to pass a file descriptor obtained with the O_PATH flag. Also, replace rule's accesses with ruleset's accesses.
Showing the changes to include/uapi (1 of 2 files). Show all
Unified · Split
| @@ -62,8 +62,9 @@ struct landlock_path_beneath_attr { · 61 unmodified lines | |||
| 62 | */ | 62 | */ |
| 63 | __u64 allowed_access; | 63 | __u64 allowed_access; |
| 64 | /** | 64 | /** |
| 65 | * @parent_fd: File descriptor, open with ``O_PATH``, which identifies | 65 | * @parent_fd: File descriptor, preferably opened with ``O_PATH``, |
| 66 | * the parent directory of a file hierarchy, or just a file. | 66 | * which identifies the parent directory of a file hierarchy, or just a |
| 67 | * file. | ||
| 67 | */ | 68 | */ |
| 68 | __s32 parent_fd; | 69 | __s32 parent_fd; |
| 69 | /* | 70 | /* |