Sandboxing with the Landlock security module
Sandboxing with the Landlock security module
Posted Oct 20, 2016 14:09 UTC (Thu) by l0kod (subscriber, #111864)In reply to: Sandboxing with the Landlock security module by fredrik
Parent article: Sandboxing with the Landlock security module
Firejail use Linux namespaces and seccomp-bpf. Landlock is a (low level) kernel feature similar to seccomp-bpf. Landlock should then be useful to sandbox managers like Firejail or any other software willing to do sandboxing (e.g. web browser).
Posted Oct 26, 2016 14:12 UTC (Wed)
by l0kod (subscriber, #111864)
[Link]
Sandboxing with the Landlock security module
RFC v4: https://www.mail-archive.com/netdev@vger.kernel.org/msg13...
Associated repository: https://github.com/l0kod/linux/commits/landlock-v4