Steven R. Brandt

Locking Down Science Gateways with Landlock and Seccomp

Abstract The most recent Linux kernels have a new feature for securing applications: Landlock. Like Seccomp before it, Landlock makes it possible for a running process to selectively relinquish access to certain system resources including network and filesystem access. Rather tha...