Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.kernel > #73665
| From | Mickaël Salaün <mic@digikod.net> |
|---|---|
| Newsgroups | linux.debian.bugs.dist, linux.debian.kernel |
| Subject | Bug#999551: Support Landlock by default in Debian kernels |
| Date | 2021-11-12 14:50 +0100 |
| Message-ID | <DiF6h-5Z9-7@gated-at.bofh.it> (permalink) |
| References | <DiD4t-4OK-1@gated-at.bofh.it> <DiEjT-5tB-3@gated-at.bofh.it> <DiD4t-4OK-1@gated-at.bofh.it> <DiEjT-5tB-3@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Cross-posted to 2 groups.
On 12/11/2021 13:45, Bastian Blank wrote: > Control: tag -1 wontfix > > On Fri, Nov 12, 2021 at 12:23:13PM +0100, Mickaël Salaün wrote: >> The Landlock security feature is built in Debian kernel since >> 5.13.12-1~exp1 which is great! However, it is not enough to enable the >> CONFIG_SECURITY_LANDLOCK option as described in the related help. The >> CONFIG_LSM option needs to be prepended by "landlock," to make Landlock >> system calls available without modifying the kernel boot arguments. > > It was left out of this list by team decision, as is e.g. bpf. So not > right now. Could we know the reason? FYI, Landlock is enabled by default at least in Arch and Fedora (and then Gentoo according to selected configuration). BPF-LSM is very specific and would require privileged services to manage it. However, Landlock brings new security features (like seccomp) and would then benefit potentially all Debian applications. It is designed from the beginning to be safely usable by all users, including unprivileged ones.
Back to linux.debian.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Bug#999551: Support Landlock by default in Debian kernels Mickaël Salaün <mic@digikod.net> - 2021-11-12 12:40 +0100
Bug#999551: Support Landlock by default in Debian kernels Yves-Alexis Perez <corsac@debian.org> - 2021-11-12 13:40 +0100
Bug#999551: Support Landlock by default in Debian kernels Mickaël Salaün <mic@digikod.net> - 2021-11-12 15:00 +0100
Processed: Re: Bug#999551: Support Landlock by default in Debian kernels "Debian Bug Tracking System" <owner@bugs.debian.org> - 2021-11-12 14:00 +0100
Bug#999551: Support Landlock by default in Debian kernels Bastian Blank <waldi@debian.org> - 2021-11-12 14:00 +0100
Bug#999551: Support Landlock by default in Debian kernels Mickaël Salaün <mic@digikod.net> - 2021-11-12 14:50 +0100
Bug#999551: Support Landlock by default in Debian kernels Brad Tilley <brad@vt.edu> - 2022-03-30 13:50 +0200
Bug#999551: marked as done (Support Landlock by default in Debian kernels) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2022-08-02 20:10 +0200
Bug#999551: marked as done (Support Landlock by default in Debian kernels) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2022-08-11 08:10 +0200
csiph-web