Top posts

Every blog post that took off on Hacker News, ranked by the votes of its best submission. 6,943 posts.

Systems & Performance
Any year
1371

Landlock-Ing Linux

Landlock is a Linux API that lets applications explicitly declare which resources they are allowed to access. Its philosophy is similar to OpenBSD’s unveil() and (less so) pledge() : programs can make a contract with the kernel stating, “I only need these files or resources — deny me everything else if I’m…