[PATCH] Documentation: landlock: Document fs.resolve_unix audit blocker

[PATCH] Documentation: landlock: Document fs.resolve_unix audit blocker

[Doehyun Baek]

The Landlock audit code can emit fs.resolve_unix as a filesystem blocker
for pathname UNIX socket resolution denials, but the admin guide's blockers
list did not mention it.

Add the missing blocker name and ABI version to keep the audit
documentation in sync with the emitted records.

Fixes: ae97330d1bd6 ("landlock: Control pathname UNIX domain socket resolution by path")
Signed-off-by: Doehyun Baek <doehyunbaek@gmail.com>
---
 Documentation/admin-guide/LSM/landlock.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Documentation/admin-guide/LSM/landlock.rst b/Documentation/admin-guide/LSM/landlock.rst
index 314052bbeb0a..8eb85c9381ff 100644
--- a/Documentation/admin-guide/LSM/landlock.rst
+++ b/Documentation/admin-guide/LSM/landlock.rst
@@ -52,6 +52,7 @@ AUDIT_LANDLOCK_ACCESS
         - fs.refer (ABI 2+)
         - fs.truncate (ABI 3+)
         - fs.ioctl_dev (ABI 5+)
+        - fs.resolve_unix (ABI 9+)
 
     **net.*** - Network access rights (ABI 4+):
         - net.bind_tcp - TCP port binding was denied

base-commit: ab9de95c9cf952332ab79453b4b5d1bfca8e514f
-- 
2.43.0

Re: [PATCH] Documentation: landlock: Document fs.resolve_unix audit blocker

[Günther Noack]

On Thu, Jun 25, 2026 at 09:28:19AM +0000, Doehyun Baek wrote:
> The Landlock audit code can emit fs.resolve_unix as a filesystem blocker
> for pathname UNIX socket resolution denials, but the admin guide's blockers
> list did not mention it.
> 
> Add the missing blocker name and ABI version to keep the audit
> documentation in sync with the emitted records.
> 
> Fixes: ae97330d1bd6 ("landlock: Control pathname UNIX domain socket resolution by path")
> Signed-off-by: Doehyun Baek <doehyunbaek@gmail.com>
> ---
>  Documentation/admin-guide/LSM/landlock.rst | 1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/Documentation/admin-guide/LSM/landlock.rst b/Documentation/admin-guide/LSM/landlock.rst
> index 314052bbeb0a..8eb85c9381ff 100644
> --- a/Documentation/admin-guide/LSM/landlock.rst
> +++ b/Documentation/admin-guide/LSM/landlock.rst
> @@ -52,6 +52,7 @@ AUDIT_LANDLOCK_ACCESS
>          - fs.refer (ABI 2+)
>          - fs.truncate (ABI 3+)
>          - fs.ioctl_dev (ABI 5+)
> +        - fs.resolve_unix (ABI 9+)
>  
>      **net.*** - Network access rights (ABI 4+):
>          - net.bind_tcp - TCP port binding was denied
> 
> base-commit: ab9de95c9cf952332ab79453b4b5d1bfca8e514f
> -- 
> 2.43.0
> 

Thanks, good catch!

Reviewed-by: Günther Noack <gnoack@google.com>

Re: [PATCH] Documentation: landlock: Document fs.resolve_unix audit blocker

[Doehyun Baek]

Hi Mickaël,

Gentle ping on this documentation fix.

Günther reviewed it:

Reviewed-by: Günther Noack <gnoack@google.com>

The patch still applies cleanly. Could this be picked up via the
Landlock tree?

Thanks,
Doehyun

Re: [PATCH] Documentation: landlock: Document fs.resolve_unix audit blocker

[Mickaël Salaün]

It's applied, thanks!

On Tue, Jul 07, 2026 at 11:40:51AM +0200, Doehyun Baek wrote:
> Hi Mickaël,
> 
> Gentle ping on this documentation fix.
> 
> Günther reviewed it:
> 
> Reviewed-by: Günther Noack <gnoack@google.com>
> 
> The patch still applies cleanly. Could this be picked up via the
> Landlock tree?
> 
> Thanks,
> Doehyun