Tag
lsm
- Dec 29, 2025 Enforcing Sandbox Policy at BPF LSM Hooks How an eBPF program attached to a kernel LSM hook can decide a security question with access to kernel objects, and why the hook it chooses determines what it can express. virtualization
- Jan 13, 2023 Landlock Rulesets: Path Hierarchies and Access Masks How Landlock binds access rights to directory hierarchies instead of syscalls, how the handled-access mask determines what a ruleset can enforce, and where the model stops. virtualization