2017 Landlock LSM: Towards unprivileged sandboxing
Channel: All Systems Go!
Date: 12/11/2017

https://media.ccc.de/c/asg2017/ASG2017-110-landlock_lsm_towards_unprivileged_sandboxing



Landlock is a proposal for a new Linux Security Module (LSM) to create secure sandboxes with the goal “to empower any process, including unprivileged ones, to securely restrict themselves.” This presentation will give an overview on what Landlock is, discuss the current status of the patchset and demonstrate how Landlock works, as well as its differences compared to other Linux security modules.



Michael Schubert