Talk: Update on Landlock (2026)
š¢ This is the recording of the “Update on Landlock talk” that MickaĆ«l SalaĆ¼n and me gave at the Linux Security Summit Europe in Prague. It gives an update on Landlock development over the past two years and reflects our current thinking about the direction of the project:
š Talk page | š„ Video on YouTube
Talk Summary
Landlock gained a few interesting features to restrict more operations. We’ll explain
- unix socket restrictions,
- signal scoping,
- thread synchronization support,
- and UDP control.
We’ll also walk through some lesser known Linux features that make such restrictions sometimes challenging to properly handle. Finally, we’ll talk about ongoing developments and the roadmap.
I also found these other Landlock-related talks from the Open Source Summit and Linux Security Summit interesting:
| Speaker | Title | Category |
|---|---|---|
| Tingmao Wang | libturnstile: Unprivileged Interactive Sandboxing from Seccomp-unotify to Landlock Supervise | Landlock Feature |
| Cong Wang | Sandlock: Rootless and Containerless Confinement for AI Agents | Landlock Application |
In 2026, we are generally seeing an explosion of projects using Landlock, many of them in the space of orchestration and sandboxing for AI agents.