Embed Notice

@dalias @lispi314 Seccomp-bpf can't inspect strings including paths. That's why they came up with landlock, which was initially trivial to bypass but should work properly now. Android does heavily police access to devices, procfs, sysfs and ioctls via SELinux. Linux kernel has very limited capabilities for doing a lot of that itself without an LSM.

POSIX DAC doesn't really forbid access, just directly opening, and more importantly the policy is very dynamic and spread out in a bunch of places.