Expand description
The Linux jail backend: user and network namespaces, Landlock filesystem rules, and a seccomp allow-list.
The network boundary is a fresh network namespace created together with a user namespace, which Linux permits unprivileged when unprivileged user namespaces are enabled. The new namespace has a private network stack and no external interface. A seccomp allow-list is the second layer: it omits every socket, io_uring, bpf, setsid, and setpgid family syscall, and any syscall outside the list kills the process. Landlock confines the filesystem to the jail read-write, the worker binary execute-read, and a fixed runtime set read-only, with no best-effort mode: a kernel that cannot fully enforce the policy refuses the run. The kernel floor is Landlock ABI v3, Linux 6.2.
Structsยง
- Namespace
Jail - The namespace, Landlock, and seccomp jail.