Mickaël Salaün f7d62cb59f landlock: Reduce the maximum number of layers to 16 ... commit 75c542d6c6 upstream. The maximum number of nested Landlock domains is currently 64. Because of the following fix and to help reduce the stack size, let's reduce it to 16. This seems large enough for a lot of use cases (e.g. sandboxed init service, spawning a sandboxed SSH service, in nested sandboxed containers). Reducing the number of nested domains may also help to discover misuse of Landlock (e.g. creating a domain per rule). Add and use a dedicated layer_mask_t typedef to fit with the number of layers. This might be useful when changing it and to keep it consistent with the maximum number of layers. Reviewed-by: Paul Moore <paul@paul-moore.com> Link: https://lore.kernel.org/r/20220506161102.525323-3-mic@digikod.net Cc: stable@vger.kernel.org Signed-off-by: Mickaël Salaün <mic@digikod.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-06-09 10:23:24 +02:00
..
ABI	f2fs: don't get FREEZE lock in f2fs_evict_inode in frozen fs	2022-04-08 14:23:58 +02:00
PCI	pci-v5.15-changes	2021-09-07 19:13:42 -07:00
RCU	…
accounting	sched/psi: report zeroes for CPU full at the system level	2022-06-09 10:22:48 +02:00
admin-guide	random: fix sysctl documentation nits	2022-05-30 09:29:12 +02:00
arm	Documentation: arm: marvell: Add 88F6825 model into list	2021-08-24 13:26:32 -06:00
arm64	arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs	2022-05-25 09:57:36 +02:00
block	Documentation: block: blk-mq: Fix small typo in multi-queue docs	2021-08-24 13:30:00 -06:00
bpf	libbpf: Rename libbpf documentation index file	2021-08-18 08:45:25 -07:00
cdrom	…
core-api	Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""	2022-04-08 14:24:13 +02:00
cpu-freq	cpufreq: Remove ready() callback	2021-09-02 18:04:17 +02:00
crypto	…
dev-tools	kfence: default to dynamic branch instead of static keys mode	2021-11-12 15:05:49 +01:00
devicetree	spi: qcom-qspi: Add minItems to interconnect-names	2022-06-09 10:22:45 +02:00
doc-guide	…
driver-api	Documentation: fix firewire.rst ABI file path error	2022-01-27 11:05:21 +01:00
fault-injection	Char / Misc driver changes for 5.15-rc1	2021-09-01 08:35:06 -07:00
fb	…
features	RISC-V Patches for the 5.15 Merge Window, Part 2	2021-09-11 14:29:42 -07:00
filesystems	f2fs: support fault injection for dquot_initialize()	2022-06-09 10:23:13 +02:00
firmware-guide	Documentation: ACPI: Fix data node reference documentation	2022-01-27 11:05:20 +01:00
firmware_class	…
fpga	…
gpu	drm/i915/display: Move DRRS code its own file	2022-03-08 19:12:40 +01:00
hid	…
hwmon	hwmon: (lm90) Add basic support for TI TMP461	2021-12-29 12:28:48 +01:00
i2c	…
ia64	…
ide	…
iio	…
infiniband	…
input	…
isdn	…
kbuild	Merge branch 'akpm' (patches from Andrew)	2021-09-08 12:55:35 -07:00
kernel-hacking	docs: kernel-hacking: Remove inappropriate text	2021-09-03 15:56:45 -06:00
leds	Documentation: leds: standartizing LED names	2021-08-20 10:26:24 +02:00
litmus-tests	…
livepatch	…
locking	Documentation/locking/locktypes: Update migrate_disable() bits.	2021-12-14 10:57:18 +01:00
m68k	…
maintainer	…
mhi	…
mips	…
misc-devices	…
netlabel	…
networking	bonding: fix ad_actor_system option setting to default	2021-12-29 12:28:44 +01:00
nios2	…
nvdimm	…
openrisc	…
parisc	…
pcmcia	…
power	Documentation: power: include kernel-doc in Energy Model doc	2021-09-07 21:17:28 +02:00
powerpc	powerpc/doc: Fix htmldocs errors	2021-08-27 00:56:34 +10:00
process	docs: submitting-patches: Fix crossref to 'The canonical patch format'	2022-06-06 08:43:41 +02:00
riscv	…
s390	…
scheduler	…
scsi	…
security	…
sh	…
sound	ALSA: usb-audio: Add quirk bits for enabling/disabling generic implicit fb	2022-06-09 10:22:41 +02:00
sparc	…
sphinx	docs: sphinx/requirements: Limit jinja2<3.1	2022-04-08 14:22:49 +02:00
sphinx-static	…
spi	…
staging	…
target	…
timers	…
trace	tracing: Add ustring operation to filtering string pointers	2022-03-08 19:12:33 +01:00
translations	Merge branch 'gcc-min-version-5.1' (make gcc-5.1 the minimum version)	2021-09-13 10:43:04 -07:00
usb	…
userspace-api	landlock: Reduce the maximum number of layers to 16	2022-06-09 10:23:24 +02:00
virt	ARM:	2021-09-07 13:40:51 -07:00
vm	Merge branch 'akpm' (patches from Andrew)	2021-09-08 12:55:35 -07:00
w1	…
watchdog	…
x86	Another collection of documentation patches, mostly fixes but also includes	2021-09-08 16:28:14 -07:00
xtensa	…
.gitignore	…
COPYING-logo	…
Changes	…
CodingStyle	…
Kconfig	…
Makefile	…
SubmittingPatches	…
arch.rst	…
asm-annotations.rst	…
atomic_bitops.txt	…
atomic_t.txt	…
conf.py	docs: pdfdocs: Fix typo in CJK-language specific font settings	2021-09-06 16:53:39 -06:00
docutils.conf	…
dontdiff	…
index.rst	…
logo.gif	…
memory-barriers.txt	…
watch_queue.rst	…