I'm excited about the progress on Virtualization-based Security being ported from Windows to Linux: lpc.events/event/17/contr… Ubuntu-LVBS is here: github.com/heki-linux/lvb…

Issue #4 is out – enjoy! pagedout.institute/?page=issues.p… Please RT and tell your friends :)

Liveblogging #sstic sur n0secure.org

You have liked 🥰 the talk of Mickaël Salaün on #landlock at SSTIC ? Come learn and practice with him (he is the landlock maintainer 🙏) during his 2 hours #landlock workshop 🛠 at Pass the SALT Conference on Wednesday July, 3rd ! REGISTRATION (free) to the con: pretix.eu/passthesalt/20…

#Landlock: From a security mechanism idea to a widely available implementation Full article and slides explaining all steps from design to upstreaming: sstic.org/2024/presentat… #sstic #sstic2024

#Landlock workshop: Linux sandboxing in practice Let's sandbox ImageMagick at #pts24 🧂 See slides, VM, code, and setup instructions: cfp.pass-the-salt.org/pts2024/talk/8…

Tahera (tahi) is working on #Landlock to improve Linux sandbox isolation with scoped abstract unix sockets, signaling, and more. She writes about her Outreachy Internships internship here: tahifahimi.github.io/outreachyblog/ #outreachy Expect these features to land this summer 🚀

It's been a while since the last one, but here is the fourth #Landlock newsletter: lore.kernel.org/landlock/20240… Moar sandboxing! 🥳

We are very excited to share our last research work: 𝐄𝐔𝐂𝐋𝐄𝐀𝐊, authored by Thomas Roche. An electromagnetic Side-Channel Vulnerability in the ECDSA implementation of all Infineon security microcontrollers, notably impacting all YubiKey 5 Series. ninjalab.io/eucleak/

For folks interested in following the Linux Security Summit EU in real-time, the free livestream details may be found here: events.linuxfoundation.org/linux-security…

At Linux Plumbers Conference 2024 - Mickaël Salaün talking about code integrity for scripts in Linux lpc.events/event/18/contr…

🚀Introducing Landrun: a CLI command to sandbox any Linux process using Landlock, no root, no containers, no headaches. Huge thanks to Mickaël Salaün (Landlock) and Günther Noack (Go lib) for making this possible! github.com/zouuup/landrun #Landlock #Linux #Security #Sandbox #Kernel

Starting with Linux 6.14, we'll be able to securely control script execution thanks to new syscall flags, successors of O_MAYEXEC. This is crucial for code integrity. The next step is to enlighten script interpreters. Let me know if you want to help! docs.kernel.org/userspace-api/…

I just published the fifth #Landlock newsletter! 🤓 - new kernel features: IPC scoping and audit logs - kernel fixes - library and talk updates - new doc - new open source Landlock users - RHEL support lore.kernel.org/landlock/20250…