Mickaël Salaün 75c542d6c6 landlock: Reduce the maximum number of layers to 16 ... The maximum number of nested Landlock domains is currently 64. Because of the following fix and to help reduce the stack size, let's reduce it to 16. This seems large enough for a lot of use cases (e.g. sandboxed init service, spawning a sandboxed SSH service, in nested sandboxed containers). Reducing the number of nested domains may also help to discover misuse of Landlock (e.g. creating a domain per rule). Add and use a dedicated layer_mask_t typedef to fit with the number of layers. This might be useful when changing it and to keep it consistent with the maximum number of layers. Reviewed-by: Paul Moore <paul@paul-moore.com> Link: https://lore.kernel.org/r/20220506161102.525323-3-mic@digikod.net Cc: stable@vger.kernel.org Signed-off-by: Mickaël Salaün <mic@digikod.net>		2022-05-23 13:27:56 +02:00
..
ABI	Changes since last update:	2022-04-20 12:35:20 -07:00
accounting	- A bunch of fixes: forced idle time accounting, utilization values	2022-01-23 17:35:27 +02:00
admin-guide	Random number generator fixes for Linux 5.18-rc1.	2022-03-31 14:51:34 -07:00
arc
arm	Documentation: arm: marvell: Extend Avanta list	2022-01-27 11:22:34 -07:00
arm64	elf: Fix the arm64 MTE ELF segment name and value	2022-04-28 11:37:06 +01:00
block	block: remove biodoc.rst	2022-02-15 07:47:52 -07:00
bpf	docs: netdev: move the netdev-FAQ to the process pages	2022-03-31 10:49:39 +02:00
cdrom	Documentation: Fix links for udftools project and pktcdvd tool	2022-02-15 16:15:33 -07:00
core-api	XArray update for 5.18:	2022-04-01 13:40:44 -07:00
cpu-freq	cpufreq: Reintroduce ready() callback	2022-02-09 13:18:49 +05:30
crypto
dev-tools	Documentation: kunit: fix path to .kunitconfig in start.rst	2022-04-04 12:02:44 -06:00
devicetree	USB fixes for 5.18-rc5	2022-04-30 09:58:46 -07:00
doc-guide	docs: discourage use of list tables	2022-01-07 09:33:13 -07:00
driver-api	Merge drm-misc/drm-misc-next-fixes into drm-misc-fixes	2022-04-05 11:39:22 +02:00
fault-injection
fb
features	nds32: Remove the architecture	2022-03-07 13:54:59 +01:00
filesystems	f2fs-fix-5.18	2022-04-25 10:53:56 -07:00
firmware_class
firmware-guide	Merge branch 'i2c/for-mergewindow' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux	2022-03-26 12:46:08 -07:00
fpga
gpu	pci-v5.18-changes	2022-03-25 13:02:05 -07:00
hid
hwmon	Char/Misc and other driver updates for 5.18-rc1	2022-03-28 12:27:35 -07:00
i2c	i2c: i801: Add support for Intel Raptor Lake PCH-S	2022-02-15 10:03:40 +01:00
ia64
ide
iio
infiniband
input	Input: docs: add more details on the use of BTN_TOOL	2022-03-01 15:46:03 +01:00
isdn
kbuild	kbuild: Make $(LLVM) more flexible	2022-03-31 12:03:46 +09:00
kernel-hacking	docs: fix typo in Documentation/kernel-hacking/locking.rst	2022-01-27 11:22:33 -07:00
leds
litmus-tests
livepatch
locking	Documentation: Fix duplicate statement about raw_spinlock_t type	2022-03-25 13:30:08 -06:00
m68k
maintainer	Some late-arriving documentation improvements. This is mostly build-system	2022-03-31 12:10:42 -07:00
mhi
mips
misc-devices
netlabel
networking	doc/ip-sysctl: add bc_forwarding	2022-04-20 10:31:43 +01:00
nios2
nvdimm
openrisc
parisc
PCI	PCI/doc: cleanup references to the legacy PCI DMA API	2022-03-30 16:54:24 +02:00
pcmcia
peci	docs: Add PECI documentation	2022-02-09 08:04:44 +01:00
power	Documentation: EM: Describe new registration method using DT	2022-03-03 09:35:04 +05:30
powerpc
process	docs: netdev: move the netdev-FAQ to the process pages	2022-03-31 10:49:39 +02:00
RCU
riscv	Documentation: riscv: remove non-existent directory from table of contents	2022-03-31 16:18:56 -07:00
s390
scheduler	Changes in this cycle were:	2022-03-22 14:39:12 -07:00
scsi	scsi: ufs: docs: UFS documentation corrections	2022-03-08 22:49:49 -05:00
security	Documentation: siphash: disambiguate HalfSipHash algorithm from hsiphash functions	2022-04-25 17:26:40 +02:00
sh
sound	ALSA: hda/realtek: Add alc256-samsung-headphone fixup	2022-03-22 21:51:02 +01:00
sparc
sphinx	docs: sphinx/requirements: Limit jinja2<3.1	2022-03-30 13:44:54 -06:00
sphinx-static
spi	spi: pxa2xx_spi: Convert to use GPIO descriptors	2022-01-31 15:17:27 +00:00
staging	remoteproc: Change rproc_shutdown() to return a status	2022-03-11 14:31:55 -06:00
target
timers
tools	Real Time Analysis Tool updates for 5.18	2022-03-23 11:08:10 -07:00
trace	Updates to Tracing:	2022-04-03 12:26:01 -07:00
translations	Kbuild -std=gnu11 updates for v5.18	2022-03-25 11:48:01 -07:00
tty
usb	usb: gadget: f_uac2: Optionally determine bInterval for HS and SS	2022-01-31 14:26:18 +01:00
userspace-api	landlock: Reduce the maximum number of layers to 16	2022-05-23 13:27:56 +02:00
virt	KVM: fix bad user ABI for KVM_EXIT_SYSTEM_EVENT	2022-04-29 12:38:22 -04:00
vm	docs: vm/page_owner: use literal blocks for param description	2022-04-27 13:28:48 -07:00
w1
watchdog
x86	- More noinstr fixes	2022-03-25 12:34:53 -07:00
xtensa
.gitignore
arch.rst
asm-annotations.rst	linkage: remove SYM_FUNC_{START,END}_ALIAS()	2022-02-22 16:21:34 +00:00
atomic_bitops.txt
atomic_t.txt
Changes
CodingStyle
conf.py	docs: pdfdocs: Pull LaTeX preamble part out of conf.py	2022-02-24 12:26:13 -07:00
COPYING-logo
docutils.conf
dontdiff
index.rst	docs: Add PECI documentation	2022-02-09 08:04:44 +01:00
Kconfig
logo.gif
Makefile	docs: Makefile: Add -no-shell-escape option to LATEXOPTS	2022-02-14 12:50:17 -07:00
memory-barriers.txt
SubmittingPatches
watch_queue.rst