erratum_4(9)

✨ erratum_4 ✨

okay bestie, welcome to the Kernel API Manual page for erratum_4(9) — and yes, we're talking about Erratum 4, no cap. 💅

🎀 Erratum 4: Creation of whiteout objects 🎀

This fix changes the access rights required for the creation of whiteout objects through mknod(2), renameat2(2), or link(2). Creating whiteout objects is now guarded by LANDLOCK_ACCESS_FS_MAKE_REG instead of LANDLOCK_ACCESS_FS_MAKE_CHAR. 🔥

Whiteout objects are used in OverlayFS to mark the absence of a file in an upper file system. Despite being created with S_IFCHR, whiteout objects do not count as character devices. 🦋

Impact: Sandboxed programs that create OverlayFS whiteouts (such as fuse-overlayfs) now require LANDLOCK_ACCESS_FS_MAKE_REG instead of LANDLOCK_ACCESS_FS_MAKE_CHAR. 😭

🌈 SEE ALSO 🌈

• Kernel file ./security/landlock/errata/abi-1.h
• erratum_3(9)

and that's the whole vibe, bestie: source/version is ./security/landlock/errata, dated October 2026 — periodt. 💖