Locking Down Science Gateways with Landlock and Seccomp
Abstract The most recent Linux kernels have a new feature for securing applications: Landlock. Like Seccomp before it, Landlock makes it possible for a running process to selectively relinquish access to certain system resources including network and filesystem access. Rather than being a proper successor to Seccomp, L...
Steven R. Brandt, Max Morris, Patrick Diehl et al.
· SN Computer Science · 0 citations