4 ms·
Yeah, I realized after that that was probably the case. I assume it uses unpriv ebpf? A bit less scary lol
by staticassertion 5y ago
Yeah, I realized after that that was probably the case. I assume it uses unpriv ebpf? A bit less scary lol
- gnoack 5y agoeBPF was the initial proposal, but Landlock didn't go with it in the end. It's just using a set of regular system calls, the logic behind it is just implemented in C in the kernel as a LSM.