Landlock Update: File Reparenting and Network Rules Support

Explore the latest developments in Landlock, a Linux security module, in this 40-minute conference talk. Discover how file reparenting limitations have been addressed, allowing for more flexible file operations within containers. Learn about the new LANDLOCK_ACCESS_FS_REFER right and its implications for security policies. Delve into the upcoming network access control features that will enable the creation of app-centric and container firewalls. Gain insights into Landlock's process composition, access control types, and API versioning. Witness a demonstration showcasing these new capabilities and their potential impact on Linux security.

Introduction
Important News
Lifting File Reparenting Limits
Challenges
Landlock Process Composition
File Reparenting Limitations
Current Network Rules
Access Control Types
EAccess and XDev
Landlock API Version
Network Rules
Demo