Landlock Genesis (eBPF Era)

Warning

Landlock is not based on eBPF anymore. These talks are outdated but kept for reference.

Summary 2019 – Landlock: a new kind of Linux Security Module leveraging eBPF

Slides

Linux Security Summit 2018 – How to safely restrict access to files in a programmatic way with Landlock?

Abstract – Slides – Demo video #1 (web server) – Demo video #2 (dynamic map update) – Demo code

Pass the SALT 2018 – Internals of Landlock: a new kind of Linux Security Module leveraging eBPF

Abstract and video – Slides – Demo video #1 (web server) – Demo video #2 (dynamic map update) – Demo code

FOSDEM 2018 – File access-control per container with Landlock

Abstract and video – Slides – Demo video – Demo code

Linux Security Summit 2017 – Landlock LSM: toward unprivileged sandboxing

Slides – Demo #1 – Demo #2