Re: [PATCH v1 2/9] landlock: Fix filesystem denial blocker reporting

[sashiko-bot@kernel.org]

> Filesystem topology denials are rendered with an empty blockers value
> because their blocker is identified by the request type instead of an
> access mask.
> 
> Introduce the private struct landlock_blockers to carry the request type
> and final missing access mask to filesystem and network denial
> tracepoints. Copy both members into named trace-record fields, then use
> the type to print change_topology for topology denials while preserving
> symbolic access masks for ordinary denials.
> 
> The request type lets typed BPF consumers distinguish topology denials
> from access denials. Keeping the native access mask in a pointer-reached
> field also lets CO-RE adjust existing programs' load width if
> access_mask_t grows.
> 
> Cc: Günther Noack <gnoack@google.com>
> Cc: Steven Rostedt <rostedt@goodmis.org>
> Fixes: 01ce260f5ccf ("landlock: Add landlock_deny_access_fs and landlock_deny_access_net")
> Signed-off-by: Mickaël Salaün <mic@digikod.net>

Sashiko has reviewed this patch and found no issues. It looks great!

-- 
Sashiko AI review · https://sashiko.dev/#/patchset/20260918185036.608651-1-mic@digikod.net?part=2