Lines Matching full:rights
13 The goal of Landlock is to enable restriction of ambient rights (e.g. global
41 `filesystem access rights`.
45 and the related actions are defined with `network access rights`.
59 to be explicit about the denied-by-default access rights.
95 version, and only use the available subset of access rights:
177 for the ruleset creation, by filtering access rights according to the Landlock
179 ``allowed_access`` rights are already available in ABI 1.
230 It is recommended to set access rights to file hierarchy leaves as much as
237 access rights per directory enables changing the location of such directories
238 without relying on the destination directory access rights (except those that
243 rights to the minimal set of data. This also helps avoid sinkhole directories,
250 Layers of file path access rights
268 access rights can be propagated with bind mounts (cf.
314 access rights, which means the tracee must be in a sub-domain of the tracer.
357 that this system call requires the rights to create and write files. However,
368 Rights associated with file descriptors
372 ``LANDLOCK_ACCESS_FS_IOCTL_DEV`` rights is associated with the newly created
396 handled access rights explicit enables the kernel and user space to have a clear
442 Access rights
571 access rights.