Locking Down Science Gateways with Landlock and Seccomp

Steven R Brandt, Max Morris, Patrick Diehl +4

The most recent Linux kernels have a new feature for securing applications: Landlock. Like Seccomp before it, Landlock makes it possible for a running process to give up access to…