self protect process with landlock to getting killed

Jay Freyensee <[email protected]> Tue, 27 Jun 2023 09:14:42 -0700
Newsgroups dev.linux.lists.landlock
Message-ID <[email protected]>
Hi I had a question for someone. Is there a way to protect a landlocked 
process from being killed by a non-landlock process?  Does that 
protection include root protection and root not being able to kill that 
landlocked process?

What about is there a way to protect the directory the landlock process 
sits in from being tampered/written-to by a non-landlock process?

I came up with the question from reading this comment in the kernel docs:

"Once a thread is landlocked, there is no way to remove its security 
policy; only adding more restrictions is allowed."

I believe you can get this protection through SELinux I was just curious 
if the landlocked gave you that as well; SELinux can be confusing to 
work with.


Thank you,

Jay