Locking Down Science Gateways with Landlock and Seccomp

Abstract

Abstract The most recent Linux kernels have a new feature for securing applications: Landlock. Like Seccomp before it, Landlock makes it possible for a running process to selectively relinquish access to certain system resources including network and filesystem access. Rather than being a proper successor to Seccomp, Landlock has different and somewhat complementary capabilities. In this paper, we will evaluate the applicability of using a combination of Landlock and Seccomp (Landlock/Seccomp) in the setting of securing science gateways—codes which need to parse and act upon user-supplied and often unsanitized input. We will explore three case studies in adding Landlock/Seccomp to mature scientific codes: Einstein Toolkit (a code that studies the dynamics of relativistic astrophysics, e.g. neutron star collisions), Octo-Tiger (a code for studying the dynamics of non-relativistic astrophysics, e.g. white dwarfs), and FUKA (an initial data solver for relativistic codes). Finally, we will discuss the implementation of a fully-featured FUKA science gateway designed around Landlock/Seccomp as its primary security mechanism without any user authentication needed.