mirror of
https://github.com/morgan9e/systemd
synced 2026-04-14 08:25:20 +09:00
@@ -26,7 +26,7 @@ void *bpf_rdonly_cast(void *, __u32) __ksym;
|
||||
* by their inode number in nsfs) that restricts creation of inodes (which would inherit the callers UID/GID)
|
||||
* or changing of ownership (similar).
|
||||
*
|
||||
* This hooks into the varius path-based LSM entrypoints that control inode creation as well as chmod(), and
|
||||
* This hooks into the various path-based LSM entrypoints that control inode creation as well as chmod(), and
|
||||
* then looks up the calling process' user namespace in a global map of namespaces, which points us to
|
||||
* another map that is simply a list of allowed mnt_ids. */
|
||||
|
||||
|
||||
Reference in New Issue
Block a user