Security support in Linux kernel


New features edit

Landlock edit

Landlock allows to sandbox applications.


👁 example: samples/landlock/sandboxer.c src


📚 References:

Landlock: unprivileged access control doc
Landlock doc

Randomize kernel stack offset edit

linux/randomize_kstack.h inc
add_random_kstack_offset id