{
  "id": 9039961,
  "title": "Landlock LSM: Securing sandbox Linux without root rights",
  "url": "https://urgent.news/2026/09/22/landlock-lsm-sandbox-linux-ohne-root-rechte-sichern",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-22T00:00:23.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/uhltak/landlock-lsm-sandbox-linux-ohne-root-rechte-sichern-36io"
  },
  "original_language": "de",
  "account": "Landlock, a Linux Security Module (LSM), introduced in kernel 5.13, allows a process to restrict its own access rights to files and network objects without requiring root privileges. This provides a sandboxing solution that can limit the damage caused by running untrusted applications. Landlock uses simple rules and does not require complex policies like SELinux or AppArmor. A command-line tool, firejail, supports Landlock and can be used to test its functionality. With Landlock, users can run applications in isolation, restricting their access to certain directories and files.",
  "summary": "Landlock LSM: Anwendungs-Sandboxing direkt im Linux-Kernel ohne Root Stellen Sie sich vor, Sie öffnen eine unbekannte PDF-Datei oder starten ein skriptartiges Tool aus einem verdächtigen Repository. Normalerweise müsste man entweder den gesamten Host infizieren riskieren oder aufwändige Virtualisierung (VMs, LXC) aufsetzen. Was wäre, wenn der Linux-Kernel jede beliebige Anwendung in einen Käfig…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}