It is not mandatory to pass a file descriptor obtained with the O_PATH flag. Also, replace rule's accesses with ruleset's accesses.
Showing the changes to include/uapi (1 of 2 files). Show all
Unified · Split
| @@ -62,8 +62,9 @@ struct landlock_path_beneath_attr { · 61 unmodified lines | ||
| 62 | 62 | */ |
| 63 | 63 | __u64 allowed_access; |
| 64 | 64 | /** |
| 65 | − * @parent_fd: File descriptor, open with ``O_PATH``, which identifies | |
| 66 | − * the parent directory of a file hierarchy, or just a file. | |
| 65 | + * @parent_fd: File descriptor, preferably opened with ``O_PATH``, | |
| 66 | + * which identifies the parent directory of a file hierarchy, or just a | |
| 67 | + * file. | |
| 67 | 68 | */ |
| 68 | 69 | __s32 parent_fd; |
| 69 | 70 | /* |