Lines Matching full:errata
475 Landlock errata
478 In addition to ABI versions, Landlock provides an errata mechanism to track
480 awareness. The errata bitmask can be queried using:
484 int errata;
486 errata = landlock_create_ruleset(NULL, 0, LANDLOCK_CREATE_RULESET_ERRATA);
487 if (errata < 0) {
493 If bit N is set (``errata & (1 << (N - 1))``), then erratum N has been fixed
498 **Most applications should NOT check errata.** In 99.9% of cases, checking
499 errata is unnecessary, increases code complexity, and can potentially
502 Landlock's best-effort protection. When in doubt, ignore errata.
504 .. kernel-doc:: security/landlock/errata/abi-4.h
507 .. kernel-doc:: security/landlock/errata/abi-6.h
510 .. kernel-doc:: security/landlock/errata/abi-1.h
513 How to check for errata argument
516 If you determine that your application needs to check for specific errata,
521 int errata = landlock_create_ruleset(NULL, 0, LANDLOCK_CREATE_RULESET_ERRATA);
522 if (errata >= 0) {
524 if (errata & (1 << (erratum_number - 1))) {
531 **Important:** Only check errata if your application specifically relies on