Sandboxing with the Landlock security module
Sandboxing with the Landlock security module
Posted Oct 20, 2016 6:17 UTC (Thu) by gutschke (subscriber, #27910)In reply to: Sandboxing with the Landlock security module by JdGordy
Parent article: Sandboxing with the Landlock security module
If it's anything like how seccomp-BPF works, then programs are indeed stackable, but each additional program can only serve to narrow permissions. And no, once a BPF program has been attached, it cannot be removed.