Deep Dive into Landlock Internals

Explore the intricacies of Landlock, a security sandboxing mechanism, in this 29-minute conference talk by Mickaël Salaün from Microsoft. Delve into the fundamentals of security sandboxing, understand Landlock's purpose and functionality, and learn how to implement it effectively. Discover current access-control features for filesystems, the process of creating rulesets, adding rules, and enforcing them. Gain insights into Landlock's development history, design priorities, and guiding principles, including unprivileged access control and composed security policies. Examine the concept of LSM stacking, sandbox policy composition, and the importance of user space testing and kernel fuzzing. Understand the Minimum Viable Product approach, design limitations, and get a glimpse of the kernel-side roadmap for Landlock's future development.

SECURITY SUMMIT
User data
What is (security) sandboxing?
What is Landlock?
How to use Landlock?
Current access-control features: filesystem
Create a ruleset
Add rules
Enforce the ruleset
Landlock, a bit of history
Why no more eBPF?
Priorities and guiding principles
Unprivileged access control
Composed security policies
LSM stacking
Sandbox policies composition
User space testing
Kernel fuzzing with syzkaller
Minimum Viable Product
Design limitations
Kernel-side roadmap