Landlock observability and telemetry
Add kernel observability and telemetry features to Linux Security Module
Landlock is unique among Linux sandboxing solutions as it is implemented as a Linux Security Module (LSM) and integrated upstream. This project will advance the Landlock LSM by developing new kernel-level observability, telemetry, and debuggability features. Building on the existing audit support, the work will deliver tracing of Landlock events and mechanisms for process sandbox identification. These improvements will help users and developers understand sandboxed process behavior, increase trust, facilitate adoption, and improve the detection and mitigation of attacks.
- The project's own website: https://docs.kernel.org/userspace-api/landlock.html
This project was funded through the NGI0 Commons Fund, a fund established by NLnet with financial support from the European Commission's Next Generation Internet programme, under the aegis of DG Communications Networks, Content and Technology under grant agreement No 101135429. Additional funding is made available by the Swiss State Secretariat for Education, Research and Innovation (SERI).
