Explore the latest developments in Landlock, a Linux security module, in this 40-minute conference talk. Discover how file reparenting limitations have been addressed, allowing for more flexible file operations within containers. Learn about the new LANDLOCK_ACCESS_FS_REFER right and its implications for security policies. Delve into the upcoming network access control features that will enable the creation of app-centric and container firewalls. Gain insights into Landlock's process composition, access control types, and API versioning. Witness a demonstration showcasing these new capabilities and their potential impact on Linux security.
Landlock Update: File Reparenting and Network Rules Support