RetroFed Forum
Your home away from modern life.
Search Categories Forum list Register Log in
About RetroFed
RetroFed

Welcome to the nostalgia-filled piefed instance of yesteryear.

Open Registration with Application questionnaire.

If you have a question or comment you can post in !meta@retrofed.com or message @DosDude@retrofed.com or @Die4Ever@retrofed.com

In case of downtime and/or emergency, we will post updates on @DosDude@mastodon.social

Some rules we try to uphold:

  • Be civil. Bigotry is not welcome. This includes (but is not limited to): transphobia, queerphobia, racism, ageism and ableism. We do not promote hate.
  • Communities need to be Retro or Retro-adjacent.
  • Please don't upload pornographic content. (use an external image host for that)
73 registered users
Administrators: DosDude, Die4Ever
Visit retrofed.com
Kage: Google Experimenting With Linux Driver Isolation Using In-Kernel LFI Sandboxes
Post Reply RetroFed Forum Forum Index » Kerala Linux Community
AuthorMessage
tumbling4986 lemmy.ca Crumpled6273@lemmy.ca
Joined: 2025-12-09
Quote

Link: https://www.phoronix.com/news/Kage-Linux-Driver-Isolation
3   Original
Pomal sh.itjust.works Pomal@sh.itjust.works
Joined: 2026-08-03
#2 · Quote Reply

How does this shape against landlock?
1
Carrots quokk.au Carrots@quokk.au
Joined: 2026-09-30
#3 · Quote Reply

Google touched it. It doesn’t exist.
2
tumbling4986 Moderator Crumpled6273@lemmy.ca
Joined: 2025-12-09
#4 · Quote Reply
Pomal wrote:
How does this shape against landlock?

Actually, they operate at completely different layers of the Linux system and solve different problems.

Landlock sandboxes userspace apps from the rest of the OS, while Kage sandboxes kernel modules from the rest of the kernel.
1
Pomal sh.itjust.works Pomal@sh.itjust.works
Joined: 2026-08-03
#5 · Quote Reply
tumbling4986 wrote:
Actually, they operate at completely different layers of the Linux system and solve different problems. Landlock sandboxes userspace apps from the rest of the OS, while Kage sandboxes kernel modules from the rest of the kernel.

Poor wording on my part - should have probably went w mesh. They’re a part of a defense in depth startegy so coming from that lense is more of my path of inquiry.
2
Post Reply
Back to top
Powered by PieFed · PieBB frontend · All times are Europe/Amsterdam