Landlock update v1.0.0 - #16005

Open

regit wants to merge 27 commits into

OISF:mainfrom

regit:landlock-update-v1.0.0

Commits on Aug 11, 2026

conf: better handling of set
regit
committed
0876578
conf: add an util to iterate on sequence
regit
committed
cf54099
landlock: expose path grant helpers as public API
regit
committed
0815f7d
landlock: add network access sandboxing
regit
committed
5a97f3a
landlock: support new kernel filesystem access rights
regit
committed
9921b05
landlock: allow plugin to declare their needs
regit
committed
320675c
landlock: allow output modules to declare their needs
regit
committed
43bdcb0
landlock: add SCLandlockForEachOutput helper
regit
committed
2eed5e9
landlock: add YAML option to override network lock
regit
committed
183a0ec
landlock: add some needed access to sandbox
regit
committed
b85cf68
landlock: sandbox earlier
regit
committed
d1eb439
landlock: allow disabling landlock setup in plugin
regit
committed
c9fac6e
output/pcap: implement landlock enabler
regit
committed
72d7d46
eve: implement landlock enabler
regit
committed
bf69d1a
landlock: handle truncation of files
regit
committed
8fcce21
landlock: authorization for some files
regit
committed
a8e337c
landlock: handle renaming in filestore
regit
committed
822420a
landlock: fix dataset state keyword
regit
committed
4ccf591
landlock: remove removal permission when sandboxing
regit
committed
c24c58b
fastlog: add landlock support
regit
committed
8807e2c
docs: document landlock update
regit
committed
ad04674
landlock: read permission for rules files
regit
committed
b17e715
landlock: add an option to rewrite a dir content
regit
committed
0e970d7
github: add landlock workflow
regit
committed
e4632bf
landlock: support older kernel headers
regit
committed
cc6e4bf
landlock: absent config dir is not an error
regit
committed
7b35750
landlock: be stricter on write permissions
regit
committed
b50a3b2

Navigation Menu

Landlock update v1.0.0 - #16005

Landlock update v1.0.0#16005
regit wants to merge 27 commits into
OISF:mainfrom
regit:landlock-update-v1.0.0

Commits on Aug 11, 2026

conf: better handling of set

conf: add an util to iterate on sequence

landlock: expose path grant helpers as public API

landlock: add network access sandboxing

landlock: support new kernel filesystem access rights

landlock: allow plugin to declare their needs

landlock: allow output modules to declare their needs

landlock: add SCLandlockForEachOutput helper

landlock: add YAML option to override network lock

landlock: add some needed access to sandbox

landlock: sandbox earlier

landlock: allow disabling landlock setup in plugin

output/pcap: implement landlock enabler

eve: implement landlock enabler

landlock: handle truncation of files

landlock: authorization for some files

landlock: handle renaming in filestore

landlock: fix dataset state keyword

landlock: remove removal permission when sandboxing

fastlog: add landlock support

docs: document landlock update

landlock: read permission for rules files

landlock: add an option to rewrite a dir content

github: add landlock workflow

landlock: support older kernel headers

landlock: absent config dir is not an error

landlock: be stricter on write permissions