Security support in Linux kernel


New features

edit

Landlock

edit

Landlock allows to sandbox applications.


👁 example: samples/landlock/sandboxer.c src


📚 References:

Landlock: unprivileged access control doc
Landlock doc

Randomize kernel stack offset

edit
linux/randomize_kstack.h inc
add_random_kstack_offset id