AI Engineer - Learn how to integrate AI into software applications
Learn Backend Development Part-Time, Online
Overview
Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This course examines Landlock, a Linux security mechanism for restricting filesystem access. It covers creating and enforcing rulesets, composing policies, testing, and kernel design considerations.
Syllabus
SECURITY SUMMIT
User data
What is (security) sandboxing?
What is Landlock?
How to use Landlock?
Current access-control features: filesystem
Create a ruleset
Add rules
Enforce the ruleset
Landlock, a bit of history
Why no more eBPF?
Priorities and guiding principles
Unprivileged access control
Composed security policies
LSM stacking
Sandbox policies composition
User space testing
Kernel fuzzing with syzkaller
Minimum Viable Product
Design limitations
Kernel-side roadmap
Taught by
Linux Foundation