Add AccessFSTruncate to access rights that apply to files

AccessFSTruncate works also on a per file basis and can be used to e.g. overwrite an existing target file like in this gist: https://gist.github.com/ngergs/b2ace345fbf8d682da33b5a4d869bb04
landlock-lsm · Jul 30, 2024 · db159e8 · db159e8
1 parent db0c8d6
commit db159e8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/landlock/config.go b/landlock/config.go
@@ -10,7 +10,7 @@ import (
 // Access permission sets for filesystem access.
 const (
 	// The set of access rights that only apply to files.
-	accessFile AccessFSSet = ll.AccessFSExecute | ll.AccessFSWriteFile | ll.AccessFSReadFile
+	accessFile AccessFSSet = ll.AccessFSExecute | ll.AccessFSWriteFile | ll.AccessFSTruncate | ll.AccessFSReadFile
 
 	// The set of access rights associated with read access to files and directories.
 	accessFSRead AccessFSSet = ll.AccessFSExecute | ll.AccessFSReadFile | ll.AccessFSReadDir