On Thu, Sep 24, 2026 at 06:48:19PM +0800, Cai Xinchen wrote: > This series adds two new Landlock filesystem access rights, > LANDLOCK_ACCESS_FS_READ_METADATA and LANDLOCK_ACCESS_FS_WRITE_METADATA, > which control access to file and directory metadata such as inode > attributes (mode, ownership, timestamps), extended attributes and POSIX > ACLs. It picks up the work from the "landlock: add chmod and chown > support" series [1] and follows the coarse-grained grouping discussed in > that thread [2]: instead of separate chmod/chown rights, metadata > operations are grouped into one read and one write right.
This is mostly fine for me. @Michael, for the fs side of things I would give you a stable branch vfs-7.*.shared.landlock.path that you can pull once this is ready.
