Still In Development, Landlock Aims To Yield Powerful Security Sandboxes For Linux

Written by Michael Larabel in Linux Security on 21 August 2017 at 06:00 AM EDT. 4 Comments
The Landlock Linux Security Module (LSM) continues to be in development and has now been revised for its seventh time. The last time we wrote about this LSM was last September while over the weekend the newest patches have surfaced.

Landlock's goal is to "allow any process, including unprivileged ones, to create powerful security sandboxes comparable to XNU Sandbox or OpenBSD Pledge. This kind of sandbox is expected to help mitigate the security impact of bugs or unexpected/malicious behaviors in user-space applications."

Landlock is making use of eBPF as the security policy language rather than coming up with its own language like in SELinux or AppArmor.

Linux administrators wishing to learn more about the continued work on the Landlock security module can find the v7 patches on the kernel mailing list.
Related News
About The Author
Michael Larabel

Michael Larabel is the principal author of and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via

Popular News This Week