Mickaël Salaün
@l0kod
Security and open source enthusiast. Maintainer of landlock.io
🦣 mastodon.social/@l0kod
🦋bsky.app/profile/l0kod.…
Joined October 2009
- Just released Island 🏝️, a sandboxing tool powered by #Landlock. It auto‑confines processes according to the caller's context (e.g. CWD) and comes with slick Zsh integration, so you can use your terminal naturally without command prefixes.
- I just published the fifth #Landlock newsletter! 🤓 - new kernel features: IPC scoping and audit logs - kernel fixes - library and talk updates - new doc - new open source Landlock users - RHEL support lore.kernel.org/landlock/20250…
- Starting with Linux 6.14, we'll be able to securely control script execution thanks to new syscall flags, successors of O_MAYEXEC. This is crucial for code integrity. The next step is to enlighten script interpreters. Let me know if you want to help! docs.kernel.org/userspace-api/…
- I'll give a talk at #FOSDEM: #Sandbox IDs with #Landlock We'll talk about the challenges to identify sandboxed processes in a safe and unprivileged way, and how that could be used to identify #containers. fosdem.org/2025/schedule/… #FOSDEM2025 #container
