Skip to content

Commit

Permalink
Remove unimplemented parts of the JSON schema
Browse files Browse the repository at this point in the history
This will be implemented but this is not the case yet:
- access bits
- v6 access groups

Signed-off-by: Mickaël Salaün <mic@digikod.net>
  • Loading branch information
l0kod committed Feb 18, 2025
1 parent cf4c53b commit be06b24
Showing 1 changed file with 39 additions and 62 deletions.
101 changes: 39 additions & 62 deletions schema/landlockconfig.json
Original file line number Diff line number Diff line change
Expand Up @@ -3,11 +3,6 @@
"description": "Landlock security policy configuration schema",
"type": "object",
"definitions": {
"bit": {
"type": "integer",
"minimum": 0,
"maximum": 63
},
"uint64": {
"type": "integer",
"minimum": 0,
Expand All @@ -34,66 +29,48 @@
]
},
"accessFs": {
"anyOf": [
{
"$ref": "#/definitions/bit"
},
{
"type": "string",
"enum": [
"execute",
"write_file",
"read_file",
"read_dir",
"remove_dir",
"remove_file",
"make_char",
"make_dir",
"make_reg",
"make_sock",
"make_fifo",
"make_block",
"make_sym",
"v1.all",
"v1.read_execute",
"v1.read_write",
"refer",
"v2.all",
"v2.read_execute",
"v2.read_write",
"truncate",
"v3.all",
"v3.read_execute",
"v3.read_write",
"v4.all",
"v4.read_execute",
"v4.read_write",
"ioctl_dev",
"v5.all",
"v5.read_execute",
"v5.read_write",
"v6.all",
"v6.read_execute",
"v6.read_write"
]
}
"type": "string",
"enum": [
"execute",
"write_file",
"read_file",
"read_dir",
"remove_dir",
"remove_file",
"make_char",
"make_dir",
"make_reg",
"make_sock",
"make_fifo",
"make_block",
"make_sym",
"v1.all",
"v1.read_execute",
"v1.read_write",
"refer",
"v2.all",
"v2.read_execute",
"v2.read_write",
"truncate",
"v3.all",
"v3.read_execute",
"v3.read_write",
"v4.all",
"v4.read_execute",
"v4.read_write",
"ioctl_dev",
"v5.all",
"v5.read_execute",
"v5.read_write"
]
},
"accessNet": {
"anyOf": [
{
"$ref": "#/definitions/bit"
},
{
"type": "string",
"enum": [
"bind_tcp",
"connect_tcp",
"v4.all",
"v5.all",
"v6.all"
]
}
"type": "string",
"enum": [
"bind_tcp",
"connect_tcp",
"v4.all",
"v5.all"
]
}
},
Expand Down

0 comments on commit be06b24

Please # to comment.