Re: self protect process with landlock to getting killed

>
>>
>> What about is there a way to protect the directory the landlock process
>> sits in from being tampered/written-to by a non-landlock process?
>
> The same principle applies: this is not possible with Landlock itself. 
> The potential malicious processes should be sandboxed.
>
>
Thanks for the response Mickael.  In this case, this would kind of be 
like a zero-day use case, that we wouldn't know all the malicious 
processes tampering with that process's directory up-front, we just know 
that we wouldn't want any non-landlocked process (known and unknown) 
tampering with the directory the landlocked process sits in.

Thanks,

Jay