Other standalone LSMs

Some small Linux Security modules I saw. Anything useful here @madaidan?

https://blog.steve.fi/so_i_accidentally_wrote_a_linux_security_module.html
https://blog.steve.fi/linux_security_modules__round_two_.html
https://blog.steve.fi/yet_more_linux_security_module_craziness___.html

Steve Kemp is a Debian dev BTW.

2 Likes

These LSMs try to prevent the user from executing malicious binaries. I don’t see much advantage over Trusted Path Execution and apparmor.

1 Like