Sandboxing with the Landlock security module

Posted Oct 20, 2016 6:05 UTC (Thu) by fredrik (subscriber, #232)
Parent article: Sandboxing with the Landlock security module

How does this compare to firejail?

https://firejail.wordpress.com/

Sandboxing with the Landlock security module

Posted Oct 20, 2016 14:09 UTC (Thu) by l0kod (subscriber, #111864) [Link] (1 responses)

Firejail use Linux namespaces and seccomp-bpf. Landlock is a (low level) kernel feature similar to seccomp-bpf. Landlock should then be useful to sandbox managers like Firejail or any other software willing to do sandboxing (e.g. web browser).

Sandboxing with the Landlock security module

Posted Oct 26, 2016 14:12 UTC (Wed) by l0kod (subscriber, #111864) [Link]

RFC v4: https://www.mail-archive.com/netdev@vger.kernel.org/msg13...
Associated repository: https://github.com/l0kod/linux/commits/landlock-v4