landlock: Add user and kernel documentation
Add a first document describing userspace API: how to define and enforce
a Landlock security policy. This is explained with a simple example.
The Landlock system calls are described with their expected behavior and
Another document is dedicated to kernel developers, describing guiding
principles and some important kernel structures.
This documentation can be built with the Sphinx framework.
Cc: James Morris <firstname.lastname@example.org>
Cc: Jann Horn <email@example.com>
Cc: Serge E. Hallyn <firstname.lastname@example.org>
Signed-off-by: Mickaël Salaün <email@example.com>
Reviewed-by: Vincent Dagonneau <firstname.lastname@example.org>
Reviewed-by: Kees Cook <email@example.com>
Signed-off-by: James Morris <firstname.lastname@example.org>
5 files changed