Mickaël Salaün

Security and open source enthusiast. Maintainer of

[/ˈziːf-kɒn/ @x33fcon]

Guillaume Couchard and Erwan Chevalier talk about #Landlock - "Leveraging Landlock telemetry for #Linux #detection engineering" at #x33fcon - #blue - https://t.co/1zjd1Szc1e

[MISCmag @MISCRedac]

Gros plan sur le #sandboxing applicatif moderne pour #Linux avec #Landlock dans le nouveau MISC.

Un article à retrouver dans notre numéro actuellement disponible en kiosque & sur https://t.co/2Ua4eGW1yh (version numérique ou papier avec ports offerts).

[Mickaël Salaün @l0kod]

I gave a talk at #FOSDEM about Island: Sandboxing tool powered by #Landlock
https://t.co/lfgiivBO4Y

[Mickaël Salaün @l0kod]

Just released Island 🏝️, a sandboxing tool powered by #Landlock.
It auto‑confines processes according to the caller's context (e.g. CWD) and comes with slick Zsh integration, so you can use your terminal naturally without command prefixes.
https://t.co/MH7jKUxo43

[Synacktiv @Synacktiv]

LinkPro: new stealthy #Linux rootkit based on eBPF - full analysis 🔍️

Our #CSIRT team discovered and named LinkPro, a new Linux rootkit, during an incident response. It exploits eBPF for evasion and persistence.
Here are the four key technical points in the image below. 💡

🔗 Full analysis: https://t.co/pHGxXj6mCv

[Mickaël Salaün @l0kod]

I just published the fifth #Landlock newsletter! 🤓
- new kernel features: IPC scoping and audit logs
- kernel fixes
- library and talk updates
- new doc
- new open source Landlock users
- RHEL support
https://t.co/2GKurcxefm

[Mickaël Salaün @l0kod]

Starting with Linux 6.14, we'll be able to securely control script execution thanks to new syscall flags, successors of O_MAYEXEC. This is crucial for code integrity.
The next step is to enlighten script interpreters. Let me know if you want to help!
https://t.co/DtsWXTjUYn

[Armin @Zoouup]

🚀Introducing Landrun: a CLI command to sandbox any Linux process using Landlock, no root, no containers, no headaches.

Huge thanks to @l0kod (Landlock) and Günther Noack (Go lib) for making this possible!

https://t.co/oU7EEhhRZk

#Landlock #Linux #Security #Sandbox #Kernel

[Mickaël Salaün @l0kod]

Slides and patches are now online!
https://t.co/wIBHUlIFRa

[Mickaël Salaün @l0kod]

I'll give a talk at #FOSDEM: #Sandbox IDs with #Landlock
We'll talk about the challenges to identify sandboxed processes in a safe and unprivileged way, and how that could be used to identify #containers.
https://t.co/wIBHUlJdGI
#FOSDEM2025 #container

[James Morris 👾 @xjamesmorris]

At @linuxplumbers - @l0kod talking about code integrity for scripts in Linux https://t.co/85tgZ06zW6

[Mickaël Salaün @l0kod]

Panel Discussion: Outreachy Linux Kernel Internship Report - Tahera Fahimi et al. at #OSSummit Europe 2024 https://t.co/3MFtGuGsHa

[Mickaël Salaün @l0kod]

#Landlock now has a logo! I'm at #OSSummit Europe, #LinuxSecuritySummit Europe, and #LinuxPlumbers this week in Vienna. If you're there, Günther, Tahera and I have some stickers to give 🤓
https://t.co/GJz0fPdmxm

[Mickaël Salaün @l0kod]

Linux Sandboxing with #Landlock - Mickaël Salaün (@l0kod) at #OSSummit Europe 2024 https://t.co/JENjLznRjf

[James Morris 👾 @xjamesmorris]

For folks interested in following the Linux Security Summit EU in real-time, the free livestream details may be found here:

https://t.co/ZriC11iqOx

[NinjaLab @NinjaLabFr]

We are very excited to share our last research work: 𝐄𝐔𝐂𝐋𝐄𝐀𝐊, authored by Thomas Roche.

An electromagnetic Side-Channel Vulnerability in the ECDSA implementation of all Infineon security microcontrollers, notably impacting all YubiKey 5 Series.

https://t.co/CUqmlUTRh8

[Mickaël Salaün @l0kod]

@unlikelydoorway The goal of this feature is to control execution, not to control access. Linux already has several access control systems but they cannot fully control execution without this new feature.

[Mickaël Salaün @l0kod]

It's been a while since the last one, but here is the fourth #Landlock newsletter: https://t.co/egKOzWMm1X
Moar sandboxing! 🥳

[Mickaël Salaün @l0kod]

Tahera (@tahifahimi) is working on #Landlock to improve Linux sandbox isolation with scoped abstract unix sockets, signaling, and more. She writes about her @outreachy internship here: https://t.co/dTl4fCOXG5 #outreachy
Expect these features to land this summer 🚀