Project

General

Profile

Actions
Copy link

Feature #1244

open

Investigate Landlock for securing the web server

Added by Hammel 1 day ago.

Status:
New
Priority:
Immediate
Assignee:
Hammel
Target version:
PiBox - 3.0 - Corrino
Start date:
01 Dec 2025
Due date:
% Done:

0%

Estimated time:
Severity:
04 - Low

Description

This allows sandboxing the application without complex features like AppArmour or SELinux.
Restrictions extend to child and thread processes but cannot be removed at runtime (only added).

See
  1. https://landlock.io/
  2. https://blog.prizrak.me/post/landlock/
  3. https://lwn.net/Articles/1048704/

No data to display

Actions
Copy link

Also available in: Atom PDF