Mickaël Salaün ec2798d85b samples/landlock: Enable users to log sandbox denials ...

By default, denials from within the sandbox are not logged.  Indeed, the
sandboxer's security policy might not be fitted to the set of sandboxed
processes that could be spawned (e.g. from a shell).

For test purpose, parse the LL_FORCE_LOG environment variable to log
every sandbox denials, including after launching the initial sandboxed
program thanks to LANDLOCK_RESTRICT_SELF_LOG_NEW_EXEC_ON.

Cc: Günther Noack <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
[mic: Remove inappropriate hunk]
Signed-off-by: Mickaël Salaün <[email protected]>

2025-03-26 13:59:44 +01:00

..

.gitignore

…

Makefile

…

sandboxer.c

samples/landlock: Enable users to log sandbox denials

2025-03-26 13:59:44 +01:00