Mickaël Salaün b2be807349 sys-kernel/coreos-modules: Enable Landlock ... Landlock is a feature to create security sandboxes thanks to 3 dedicated system calls. They are designed to be safe to used by any processes, which can only drop their privileges, similarly to seccomp. The new Landlock LSM is build in the kernel (CONFIG_SECURITY_LANDLOCK=y) but it is not enough to make it usable by default. As a stackable LSM, it is required to enable it at boot time with the CONFIG_LSM list. See https://docs.kernel.org/userspace-api/landlock.html#kernel-support As for other stackable LSMs, prepending Landlock to the default LSM list enables users to potentially get more protection by default by letting programs sandbox themselves. As a dependency, CONFIG_SECURITY_PATH=y will be automatically set. Signed-off-by: Mickaël Salaün <mic@digikod.net>		2024-07-29 15:10:55 +02:00
..
.repo/manifests	New version: main-4041.0.0-nightly-20240724-2100	2024-07-24 21:00:27 +00:00
src/third_party	sys-kernel/coreos-modules: Enable Landlock	2024-07-29 15:10:55 +02:00