I only recently became aware of Landlock. It does not appear to have seen wide traction, although it remains an example of an LSM coming closer to a real capabilities model.
Google very quietly dropped support for their port of Capsicum to Linux around 2020.
I only caught wind of Sandstorm.io's seccomp-bpf filters late last night when diving on the code. As ever, it's just a syscall ACL mechanism, though hats off to Kenton for reminding us all that Linux "capabilities" are not capabilities.
Dr. Bruce Simpson
npub1d0…sg2fh
2026-10-09 21:50:31 UTC
in reply to nevent1q…43mv
Author Public Key
npub1d0rpcrewj9c6rj9mk0mt9fj5nwx26j6w2hs0m2ggrtys4u7wmspq6sg2fhSeen on
wss://relay.momostr.pinkPublished at
2026-10-09 21:50:31 UTCEvent JSON
{
"id": "48d9dfa3fba913de0ddd7fca01eb1983ee8b6982740fc448db87b083819727dc",
"pubkey": "6bc61c0f2e9171a1c8bbb3f6b2a6549b8cad4b4e55e0fda9081ac90af3cedc02",
"created_at": 1791582631,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.bsd.cafe/@bms/117413159366373781",
"web"
],
[
"e",
"144631209aca50047d9b956879be9d34b4395451e2220004d43a98643e1ba560",
"",
"root",
"6bc61c0f2e9171a1c8bbb3f6b2a6549b8cad4b4e55e0fda9081ac90af3cedc02"
],
[
"e",
"107f158b0f2cbaafe1415e5374a3e1d864f1cbaaa90e5b4c7e3fa0c4de69324d",
"",
"reply",
"215e73fb33e912bab7bb81306edc5c774fe930d165c608fb1eab9a26158d4330"
],
[
"p",
"6bc61c0f2e9171a1c8bbb3f6b2a6549b8cad4b4e55e0fda9081ac90af3cedc02"
],
[
"p",
"215e73fb33e912bab7bb81306edc5c774fe930d165c608fb1eab9a26158d4330"
],
[
"proxy",
"https://mastodon.bsd.cafe/ap/users/116971043378070209/statuses/117413159366373781",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mastodon.bsd.cafe/ap/users/116971043378070209/statuses/117413159366373781",
"pink.momostr"
],
[
"-"
]
],
"content": "I only recently became aware of Landlock. It does not appear to have seen wide traction, although it remains an example of an LSM coming closer to a real capabilities model.\n\nGoogle very quietly dropped support for their port of Capsicum to Linux around 2020.\n\nI only caught wind of Sandstorm.io's seccomp-bpf filters late last night when diving on the code. As ever, it's just a syscall ACL mechanism, though hats off to Kenton for reminding us all that Linux \"capabilities\" are not capabilities.",
"sig": "c5cc3f4e6ebb5eab59d2f9060045fde22e9fecdafb671331081b4383c90cd8e4b0b83f663cc4eb8f2c2bd8a70d9fe3d3ee0f1c624ddec6ffb86b9bf793380e6d"
}