self protect process with landlock to getting killed
Jay Freyensee <[email protected]> Tue, 27 Jun 2023 09:14:42 -0700
| Newsgroups | dev.linux.lists.landlock |
|---|---|
| Message-ID | <[email protected]> |
Hi I had a question for someone. Is there a way to protect a landlocked process from being killed by a non-landlock process? Does that protection include root protection and root not being able to kill that landlocked process? What about is there a way to protect the directory the landlock process sits in from being tampered/written-to by a non-landlock process? I came up with the question from reading this comment in the kernel docs: "Once a thread is landlocked, there is no way to remove its security policy; only adding more restrictions is allowed." I believe you can get this protection through SELinux I was just curious if the landlocked gave you that as well; SELinux can be confusing to work with. Thank you, Jay