Linux kernel 5.13 adds support for Landlock Linux Security Module (LSM).
This allows unprivileged processes to create safe security sandboxes that can securely restrict the ambient rights (e.g. global filesystem access) for themselves.
Please kindly refer to the landlock userspace-api, kernel doc, website and the feature request in runc for details.
Linux kernel 5.13 adds support for Landlock Linux Security Module (LSM).
This allows unprivileged processes to create safe security sandboxes that can securely restrict the ambient rights (e.g. global filesystem access) for themselves.
Please kindly refer to the landlock userspace-api, kernel doc, website and the feature request in runc for details.