# \[kernel-hardening\] \[PATCH net-next v7 00/10\] Landlock LSM: Toward unprivileged sandboxing

- From: James Morris \<jmorris@namei.org\>
- Date: 2017-08-28 03:39:42 
- List: linux-security-module
- Page: https://ratatoskr.run/linux-security-module/2017/08/5076695
- Thread: https://ratatoskr.run/linux-api/2017/08/5071656/t.md

```text
On Mon, 21 Aug 2017, Micka?l Sala?n wrote:

> ## Why a new LSM? Are SELinux, AppArmor, Smack and Tomoyo not good enough?
> 
> The current access control LSMs are fine for their purpose which is to give the
> *root* the ability to enforce a security policy for the *system*. What is
> missing is a way to enforce a security policy for any application by its
> developer and *unprivileged user* as seccomp can do for raw syscall filtering.
> 

You could mention here that the first case is Mandatory Access Control, 
in general terms.



-- 
James Morris
[ref]
```