landlock: Prepare to use credential instead of domain for network
authorMickaël Salaün <mic@digikod.net>
Thu, 20 Mar 2025 19:06:54 +0000 (20:06 +0100)
committerMickaël Salaün <mic@digikod.net>
Wed, 26 Mar 2025 12:59:35 +0000 (13:59 +0100)
commit93f33f0cb2f0a4bc029912ac3e33ccf2034dc5c2
tree1b568a349a333812c5672d78307f03f797bd6c55
parentae2483a26017d24f505caa87935fb8f17117bbfa
landlock: Prepare to use credential instead of domain for network

This cosmetic change that is needed for audit support, specifically to
be able to filter according to cross-execution boundaries.

Optimize current_check_access_socket() to only handle the access
request.

Remove explicit domain->num_layers check which is now part of the
landlock_get_applicable_subject() call.

Cc: Günther Noack <gnoack@google.com>
Link: https://lore.kernel.org/r/20250320190717.2287696-6-mic@digikod.net
Signed-off-by: Mickaël Salaün <mic@digikod.net>
security/landlock/net.c