https://nalar.dev/tags/landlock/ Recent content in Landlock on Nalar Hugo en-us Thu, 17 Sep 2026 00:00:00 +0000 https://nalar.dev/landlock-rulesets-restrict-future-path-access-not-open-file-authority/ Thu, 17 Sep 2026 00:00:00 +0000 https://nalar.dev/landlock-rulesets-restrict-future-path-access-not-open-file-authority/ <h1 id="landlock-rulesets-restrict-future-path-access-not-open-file-authority">Landlock Rulesets Restrict Future Path Access, Not Open File Authority</h1> <p>A process opens a writable configuration file, installs a restrictive Landlock ruleset, and then continues running code that should have access only to a small working directory. The later policy can block a fresh attempt to open that configuration path, yet the descriptor obtained before confinement remains usable. The filesystem view has narrowed, but authority already materialized as an open file has not vanished.</p>