From be06b24f0dddcb7d4bf4c76f7329ac2ee45ce781 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micka=C3=ABl=20Sala=C3=BCn?= Date: Tue, 18 Feb 2025 09:22:13 +0100 Subject: [PATCH] Remove unimplemented parts of the JSON schema MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This will be implemented but this is not the case yet: - access bits - v6 access groups Signed-off-by: Mickaël Salaün --- schema/landlockconfig.json | 101 ++++++++++++++----------------------- 1 file changed, 39 insertions(+), 62 deletions(-) diff --git a/schema/landlockconfig.json b/schema/landlockconfig.json index dda09df..5935ceb 100644 --- a/schema/landlockconfig.json +++ b/schema/landlockconfig.json @@ -3,11 +3,6 @@ "description": "Landlock security policy configuration schema", "type": "object", "definitions": { - "bit": { - "type": "integer", - "minimum": 0, - "maximum": 63 - }, "uint64": { "type": "integer", "minimum": 0, @@ -34,66 +29,48 @@ ] }, "accessFs": { - "anyOf": [ - { - "$ref": "#/definitions/bit" - }, - { - "type": "string", - "enum": [ - "execute", - "write_file", - "read_file", - "read_dir", - "remove_dir", - "remove_file", - "make_char", - "make_dir", - "make_reg", - "make_sock", - "make_fifo", - "make_block", - "make_sym", - "v1.all", - "v1.read_execute", - "v1.read_write", - "refer", - "v2.all", - "v2.read_execute", - "v2.read_write", - "truncate", - "v3.all", - "v3.read_execute", - "v3.read_write", - "v4.all", - "v4.read_execute", - "v4.read_write", - "ioctl_dev", - "v5.all", - "v5.read_execute", - "v5.read_write", - "v6.all", - "v6.read_execute", - "v6.read_write" - ] - } + "type": "string", + "enum": [ + "execute", + "write_file", + "read_file", + "read_dir", + "remove_dir", + "remove_file", + "make_char", + "make_dir", + "make_reg", + "make_sock", + "make_fifo", + "make_block", + "make_sym", + "v1.all", + "v1.read_execute", + "v1.read_write", + "refer", + "v2.all", + "v2.read_execute", + "v2.read_write", + "truncate", + "v3.all", + "v3.read_execute", + "v3.read_write", + "v4.all", + "v4.read_execute", + "v4.read_write", + "ioctl_dev", + "v5.all", + "v5.read_execute", + "v5.read_write" ] }, "accessNet": { - "anyOf": [ - { - "$ref": "#/definitions/bit" - }, - { - "type": "string", - "enum": [ - "bind_tcp", - "connect_tcp", - "v4.all", - "v5.all", - "v6.all" - ] - } + "type": "string", + "enum": [ + "bind_tcp", + "connect_tcp", + "v4.all", + "v5.all" ] } },