abi-1.h

/* SPDX-License-Identifier: GPL-2.0-only */

/**
 * DOC: erratum_3
 *
 * Erratum 3: Disconnected directory handling
 * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 *
 * This fix addresses an issue with disconnected directories that occur when a
 * directory is moved outside the scope of a bind mount.  The change ensures
 * that evaluated access rights include both those from the disconnected file
 * hierarchy down to its filesystem root and those from the related mount point
 * hierarchy.  This prevents access right widening through rename or link
 * actions.
 *
 * Impact:
 *
 * Without this fix, it was possible to widen access rights through rename or
 * link actions involving disconnected directories, potentially bypassing
 * ``LANDLOCK_ACCESS_FS_REFER`` restrictions.  This could allow privilege
 * escalation in complex mount scenarios where directories become disconnected
 * from their original mount points.
 */
LANDLOCK_ERRATUM(3)