From 198c43590a9c6669bac8a3518d04bf40b762c594 Mon Sep 17 00:00:00 2001 From: Doehyun Baek Date: Thu, 25 Jun 2026 09:28:19 +0000 Subject: [PATCH] landlock: Document fs.resolve_unix audit blocker MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The Landlock audit code can emit fs.resolve_unix as a filesystem blocker for pathname UNIX socket resolution denials, but the admin guide's blockers list did not mention it. Add the missing blocker name and ABI version to keep the audit documentation in sync with the emitted records. Fixes: ae97330d1bd6 ("landlock: Control pathname UNIX domain socket resolution by path") Signed-off-by: Doehyun Baek Reviewed-by: Günther Noack [mic: Fix subject] Link: https://patch.msgid.link/20260625092819.1870049-1-doehyunbaek@gmail.com Signed-off-by: Mickaël Salaün --- Documentation/admin-guide/LSM/landlock.rst | 1 + 1 file changed, 1 insertion(+) diff --git a/Documentation/admin-guide/LSM/landlock.rst b/Documentation/admin-guide/LSM/landlock.rst index 314052bbeb0a..8eb85c9381ff 100644 --- a/Documentation/admin-guide/LSM/landlock.rst +++ b/Documentation/admin-guide/LSM/landlock.rst @@ -52,6 +52,7 @@ AUDIT_LANDLOCK_ACCESS - fs.refer (ABI 2+) - fs.truncate (ABI 3+) - fs.ioctl_dev (ABI 5+) + - fs.resolve_unix (ABI 9+) **net.*** - Network access rights (ABI 4+): - net.bind_tcp - TCP port binding was denied