Comment by arianvanp

Comment by arianvanp 3 days ago

1 reply

There is nothing to do here. Landlock already a guarantees that you can't undo rules that were already applied. Your application can further restrict itself but it can't unrestrict itself.

als0 3 days ago

Just need the container manager to not block the landlock system call