this post was submitted on 30 Nov 2025
10 points (100.0% liked)

Pulse of Truth

1744 readers
71 users here now

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

founded 2 years ago
MODERATORS
krogoth
10
Landlock-ing Linux (blog.prizrak.me)
submitted 2 days ago by lemmydev2 to c/pulse_of_truth
1 comments fedilink hide all child comments
 

Comments

you are viewing a single comment's thread
view the rest of the comments
[–] higgsboson@piefed.social 4 points 1 day ago

Landlock is a Linux API that lets applications explicitly declare which resources they are allowed to access. Its philosophy is similar to OpenBSD’s unveil() and (less so) pledge(): programs can make a contract with the kernel stating, “I only need these files or resources — deny me everything else if I’m compromised.”