Get the latest tech news
Linux's Landlock Sandboxed Apps Could Remove Restrictions On Itself
Merged back in 2021 for Linux 5.13 was Landlock as a means of unprivileged application sandboxing
For apps that have access to the fork() and keyctl() system calls, it turns out it's been possible to get rid of all Landlock restrictions on the sandboxed application itself. This has existed going back to the code merged in 2021 within the bits for setting up the security framework and credential management for this means of unprivileged access control. But the good news is Google engineer Jann Horn has now dealt with this issue of locking track of Landlock restrictions within the "cred_transfer" code.
Or read this on Phoronix
