I just learned that part of the XZ incident, the attacker disabled Landlock, thE application sandboxing LSM (that I keep hoping grabs more use cases) 1. I didn't think Landlock was that widely adopted at the app level 2. Surprised that XZ could meaningfully use it for such a low level function

1 likes 0 replies