New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Landlock support #3928
Comments
l0kod
added a commit
to l0kod/linuxkit
that referenced
this issue
Jun 5, 2023
Set CONFIG_SECURITY_LANDLOCK=y and enable Landlock by default at boot time with CONFIG_LSM. See https://docs.kernel.org/userspace-api/landlock.html#kernel-support Closes linuxkit#3928 Signed-off-by: Mickaël Salaün <mic@digikod.net>
l0kod
added a commit
to l0kod/linuxkit
that referenced
this issue
Jun 16, 2023
Set CONFIG_SECURITY_LANDLOCK=y and enable Landlock by default at boot time with CONFIG_LSM. See https://docs.kernel.org/userspace-api/landlock.html#kernel-support Closes linuxkit#3928 Signed-off-by: Mickaël Salaün <mic@digikod.net>
l0kod
added a commit
to l0kod/linuxkit
that referenced
this issue
Oct 10, 2023
Set CONFIG_SECURITY_LANDLOCK=y and enable Landlock by default at boot time with CONFIG_LSM. See https://docs.kernel.org/userspace-api/landlock.html#kernel-support Closes linuxkit#3928 Signed-off-by: Mickaël Salaün <mic@digikod.net>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
We worked together a few years ago (cf. #1554) before the Landlock LSM was in mainline. A lot changed since then, and Landlock is now widely available and enabled by default in most distros. As reported in phylum-dev/birdcage#31 it would be great for LinuxKit to support Landlock and enable it by default.
The required changes are described in the official documentation.
The text was updated successfully, but these errors were encountered: