Safely Restricting File Access with Landlock - A Programmatic Approach

Explore the innovative Landlock approach to safely restricting file access in an unprivileged context through this conference talk. Delve into the challenges of applying unprivileged access control on files, examine previous Landlock attempts, and understand the new method for programmatically describing file access. Witness a demonstration of dynamic access control for end users, and engage in a discussion about potential drawbacks and kernel implementation dependencies. Gain insights from security researcher Mickaël Salaün on Linux-based operating system security, system hardening, and the development of the Landlock Linux Security Module (LSM).