{"guid":"33ac18b7-146e-4445-a617-a0e6f83407d5","title":"Landlock LSM: Towards unprivileged sandboxing","subtitle":null,"slug":"ASG2017-110-landlock_lsm_towards_unprivileged_sandboxing","link":"https://c3voc.de","description":"Landlock is a proposal for a new Linux Security Module (LSM) to create secure sandboxes with the goal “to empower any process, including unprivileged ones, to securely restrict themselves.” This presentation will give an overview on what Landlock is, discuss the current status of the patchset and demonstrate how Landlock works, as well as its differences compared to other Linux security modules.","original_language":"eng","persons":["Michael Schubert"],"tags":["ASG2017","110"],"view_count":109,"promoted":false,"date":"2017-10-21T00:00:00.000+02:00","release_date":"2017-10-21T02:00:00.000+02:00","updated_at":"2025-03-30T20:45:02.652+02:00","length":1185,"duration":1185,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2017/110-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2017/110-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2017/33ac18b7-146e-4445-a617-a0e6f83407d5-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2017/33ac18b7-146e-4445-a617-a0e6f83407d5-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2017-110-landlock_lsm_towards_unprivileged_sandboxing","url":"https://api.media.ccc.de/public/events/33ac18b7-146e-4445-a617-a0e6f83407d5","conference_title":"All Systems Go! 2017","conference_url":"https://api.media.ccc.de/public/conferences/asg2017","related":[{"event_id":4646,"event_guid":"3e4263fb-2d17-486b-8f41-24b19ef64ffb","weight":5},{"event_id":4649,"event_guid":"0386da26-f42d-4808-a965-a5f9a0469d79","weight":9},{"event_id":4654,"event_guid":"e288c92d-3270-42c3-96bf-324fb41cfe21","weight":8},{"event_id":4657,"event_guid":"7c31fc34-cc78-40b3-b6d0-30bee6ca01c1","weight":11},{"event_id":4672,"event_guid":"6d9e8e7e-9250-4c9e-a050-90234d40f873","weight":8},{"event_id":4674,"event_guid":"22578f18-885b-4dce-a952-32ea3973ca15","weight":10},{"event_id":4678,"event_guid":"24be9e28-e48f-46c6-a7da-df5c83e7945f","weight":8},{"event_id":4681,"event_guid":"fa595475-4159-438a-aa03-735331373a15","weight":5}],"recordings":[{"size":46,"length":1185,"mime_type":"video/mp4","language":"eng","filename":"ASG2017-110-eng-Landlock_LSM_Towards_unprivileged_sandboxing_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-10-21T21:50:22.365+02:00","recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2017/h264-hd/ASG2017-110-eng-Landlock_LSM_Towards_unprivileged_sandboxing_hd.mp4","url":"https://api.media.ccc.de/public/recordings/19977","event_url":"https://api.media.ccc.de/public/events/33ac18b7-146e-4445-a617-a0e6f83407d5","conference_url":"https://api.media.ccc.de/public/conferences/asg2017"},{"size":13,"length":1179,"mime_type":"audio/opus","language":"eng","filename":"ASG2017-110-eng-Landlock_LSM_Towards_unprivileged_sandboxing.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2017-10-21T22:04:36.442+02:00","recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2017/opus/ASG2017-110-eng-Landlock_LSM_Towards_unprivileged_sandboxing.opus","url":"https://api.media.ccc.de/public/recordings/20000","event_url":"https://api.media.ccc.de/public/events/33ac18b7-146e-4445-a617-a0e6f83407d5","conference_url":"https://api.media.ccc.de/public/conferences/asg2017"},{"size":26,"length":1185,"mime_type":"video/webm","language":"eng","filename":"ASG2017-110-eng-Landlock_LSM_Towards_unprivileged_sandboxing_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2017-10-21T22:05:09.826+02:00","recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2017/webm-sd/ASG2017-110-eng-Landlock_LSM_Towards_unprivileged_sandboxing_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/20001","event_url":"https://api.media.ccc.de/public/events/33ac18b7-146e-4445-a617-a0e6f83407d5","conference_url":"https://api.media.ccc.de/public/conferences/asg2017"},{"size":26,"length":1185,"mime_type":"video/mp4","language":"eng","filename":"ASG2017-110-eng-Landlock_LSM_Towards_unprivileged_sandboxing_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2017-10-21T22:05:40.070+02:00","recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2017/h264-sd/ASG2017-110-eng-Landlock_LSM_Towards_unprivileged_sandboxing_sd.mp4","url":"https://api.media.ccc.de/public/recordings/20002","event_url":"https://api.media.ccc.de/public/events/33ac18b7-146e-4445-a617-a0e6f83407d5","conference_url":"https://api.media.ccc.de/public/conferences/asg2017"},{"size":17,"length":1179,"mime_type":"audio/mpeg","language":"eng","filename":"ASG2017-110-eng-Landlock_LSM_Towards_unprivileged_sandboxing.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2017-10-21T22:06:23.304+02:00","recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2017/mp3/ASG2017-110-eng-Landlock_LSM_Towards_unprivileged_sandboxing.mp3","url":"https://api.media.ccc.de/public/recordings/20003","event_url":"https://api.media.ccc.de/public/events/33ac18b7-146e-4445-a617-a0e6f83407d5","conference_url":"https://api.media.ccc.de/public/conferences/asg2017"},{"size":56,"length":1185,"mime_type":"video/webm","language":"eng","filename":"ASG2017-110-eng-Landlock_LSM_Towards_unprivileged_sandboxing_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-10-21T22:52:04.664+02:00","recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2017/webm-hd/ASG2017-110-eng-Landlock_LSM_Towards_unprivileged_sandboxing_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/20014","event_url":"https://api.media.ccc.de/public/events/33ac18b7-146e-4445-a617-a0e6f83407d5","conference_url":"https://api.media.ccc.de/public/conferences/asg2017"}]}