selftests/landlock/fs_test.c

724 struct rule {
743 			  const struct rule rules[])
752 		TH_LOG("No rule list");
756 		TH_LOG("Empty rule list");
778 	const struct rule rules[] = {
827 	const struct rule rules[] = {
850 	const struct rule rules[] = {
908 	const struct rule rules[] = {
935 	const struct rule rules[] = {
976 	const struct rule layer1[] = {
988 	const struct rule layer2[] = {
997 	const struct rule layer3[] = {
1083 	const struct rule layer1[] = {
1090 	const struct rule layer2[] = {
1146 	const struct rule layer1_read[] = {
1154 	/* First rule with write restrictions. */
1155 	const struct rule layer2_read_write[] = {
1169 	const struct rule layer3_read[] = {
1177 	const struct rule layer4_read_write[] = {
1188 	const struct rule layer5_read[] = {
1199 	const struct rule layer6_execute[] = {
1210 	const struct rule layer7_read_write[] = {
1317 	const struct rule rules[] = {
1344 	 * Tests shared rule extension: the following rules should not grant
1399 	 * Now, dir_s1d3 get a new rule tied to it, only allowing
1401 	 * that there was no rule tied to it before.
1410 	 * now denied because the new rule mask the rule previously inherited
1434 	const struct rule rules[] = {
1453 	/* Now dir_s1d2, parent of dir_s1d3, gets a new rule tied to it. */
1472 	const struct rule rules[] = {
1529 	const struct rule rules[] = {
1558 	const struct rule rules[] = {
1586  * This test verifies that we can apply a landlock rule on the root directory
1591 	struct rule rules[] = {
1621 	const struct rule rules[] = {
1641 	const struct rule rules[] = {
1669 	const struct rule rules[] = {
1692 	const struct rule rules[] = {
1785 	const struct rule rules[] = {
1831 	const struct rule layer1_base[] = {
1838 	const struct rule layer2_subs[] = {
2014 	const struct rule rules[] = {
2047 	const struct rule layer1[] = {
2054 	const struct rule layer2[] = {
2116 	const struct rule rules[] = {
2198 	const struct rule rules[] = {
2262 	const struct rule layer1[] = {
2304 				    const struct rule layer1[],
2306 				    const struct rule layer2[])
2343 const struct rule layer_dir_s1d1_refer[] = {
2351 const struct rule layer_dir_s1d1_execute[] = {
2360 const struct rule layer_dir_s2d1_execute[] = {
2371  * directories, *with* a rule matching a parent directory, but not directly
2392  * directories, *without* a rule matching a parent directory, but not directly
2450 	const struct rule layer1[] = {
2528 	const struct rule layer1[] = {
2673 	const struct rule layer1[] = {
2705 	const struct rule layer2[] = {
2714 	 * rule (and no explicit handling of REFER).
2973 	const struct rule layer1[] = {
3035 	const struct rule layer1[] = {
3128 	const struct rule rules[] = {
3165 	const struct rule rules[] = {
3191 	const struct rule rules[] = {
3279 	const struct rule rules[] = {
3324 	const struct rule rules[] = {
3364 	const struct rule rules[] = {
3407 	const struct rule rules[] = {
3498 	const struct rule rules[] = {
3561 	const struct rule rules[] = {
3679 	const struct rule layer1[] = {
3687 	const struct rule layer2[] = {
3696 	const struct rule layer3[] = {
3815 	const struct rule rules[] = {
3856 		const struct rule rules[] = {
4251 	const struct rule rules[] = {
4286 	const struct rule rules[] = {
4331 	const struct rule rules[] = {
4447 	const struct rule layer1_parent[] = {
4463 	const struct rule layer2_mount_point[] = {
4475 	const struct rule layer3_source[] = {
4483 	const struct rule layer4_destination[] = {
4538 	/* Sets a (shared) rule only on the source. */
4562 	/* Sets a (shared) rule only on the destination. */
4579 	const struct rule layer1[] = {
4857 	const struct rule layer1_base[] = {
4872 	const struct rule layer2_data[] = {
4888 	const struct rule layer3_subdirs[] = {
4920 	const struct rule layer4_files[] = {
4972 	const struct rule layer5_merge_only[] = {
5288 	const struct rule layer1_allow_read_file[] = {
5359 	const struct rule layer1[] = {