Linux to get kernel 'lockdown' feature

guest · Sep 29, 2019

Linux to get kernel 'lockdown' feature
New Linux kernel "lockdown" module to limit high-privileged users -- even root -- from tampering with some kernel functionality
September 29, 2019
https://www.zdnet.com/article/linux-to-get-kernel-lockdown-feature/

After years of countless reviews, discussions, and code rewrites, Linus Torvalds approved on Saturday a new security feature for the Linux kernel, named "lockdown."

The new feature will ship as a LSM (Linux Security Module) in the soon-to-be-released Linux kernel 5.4 branch, where it will be turned off by default; usage being optional due to the risk of breaking existing systems.
PUTTING A LEASH ON THE ROOT ACCOUNT
The new feature's primary function will be to strengthen the divide between userland processes and kernel code by preventing even the root account from interacting with kernel code -- something that it's been able to do, by design, until now.
TWO LOCKDOWN MODES
The new module will support two lockdown modes, namely "integrity" and "confidentiality." Each is unique, and restricts access to different kernel functionality.
Click to expand...

Log in or Sign up

Linux to get kernel 'lockdown' feature

guest Guest

Log in or Sign up

Linux to get kernel 'lockdown' feature

guest Guest

Useful Searches