# Re: \[RFC v2 00/10\] Landlock LSM: Unprivileged sandboxing

- From: Andy Lutomirski \<luto@amacapital.net\>
- Date: 2016-08-30 16:06:54 
- List: linux-api
- Page: https://ratatoskr.run/linux-api/2016/08/4824893
- Thread: https://ratatoskr.run/linux-api/2016/08/4822232/t.md

```text
On Thu, Aug 25, 2016 at 3:32 AM, Mickaël Salaün [ref] wrote:
> Hi,
>
> This series is a proof of concept to fill some missing part of seccomp as the
> ability to check syscall argument pointers or creating more dynamic security
> policies. The goal of this new stackable Linux Security Module (LSM) called
> Landlock is to allow any process, including unprivileged ones, to create
> powerful security sandboxes comparable to the Seatbelt/XNU Sandbox or the
> OpenBSD Pledge. This kind of sandbox help to mitigate the security impact of
> bugs or unexpected/malicious behaviors in userland applications.

Mickaël, will you be at KS and/or LPC?
```