Extra Credit

Linux Security Modules

Official docs outline

10 sections
  1. LSM admin guide

    Index of in-tree Linux Security Modules.

  2. SELinux

    SELinux enforcement, policy and booleans.

  3. AppArmor

    Path-based confinement profiles.

  4. Yama

    Yama ptrace_scope levels restricting which processes may attach to others with ptrace.

  5. LSM kernel hooks

    Security hooks, blobs and stacking.

  6. Landlock

    Unprivileged sandboxing with rulesets and access rights.

  7. Seccomp BPF

    System call filtering with BPF filters.

  8. Credentials

    Task credentials, uid, gid and capabilities.

  9. Kernel keyrings

    Key retention service and keyrings.

  10. Self-protection

    Kernel hardening features such as KASLR and stack protection.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.

All 29