Security support in Linux kernel

New features

Landlock

Landlock allows to sandbox applications.

👁 example: samples/landlock/sandboxer.c _src

📚 References:

Landlock: unprivileged access control _doc

Landlock _doc

Randomize kernel stack offset

linux/randomize_kstack.h _inc

add_random_kstack_offset _id