Landlock Udp Port Control

in Linux 7.2

Adds LANDLOCK_ACCESS_NET_BIND_UDP and LANDLOCK_ACCESS_NET_CONNECT_SEND_UDP.

TODO: Merge this page with LandlockTcpPortControl?

Landlock can restrict the use of connect(2) and bind(2) with UDP ports.

API

In struct landlock_ruleset_attr, in the field:

__u64 handled_access_net;

you can now set:

• LANDLOCK_ACCESS_NET_BIND_UDP: Bind a UDP socket to a local port.
• LANDLOCK_ACCESS_NET_CONNECT_SEND_UDP: Connect or send via a UDP socket.

Documentation commit