Mickaël Salaün
where else to find them
no profile links on file
what they talk about
where they keep going back
- Linux Security Summit North America3 editions2018–2023
- Linux Security Summit Europe2 editions2023–2025
all 5 in the filters
on a stage with
- Casey Schaufleronce
- John Johansenonce
- Mimi Zoharonce
all 4 in the filters
who talks about the same things
- John Johansen15 talks
- Ignat Korchagin36 talks
- Paul Moore13 talks
- Martin Ertsås7 talks
- Christian Brauner30 talks
- Kees Cook23 talks
| title | conference | date |
|---|---|---|
| Script Integrity | Linux Security Summit Europe 2025 | 2025-08-28 |
Linux 6.14 adds a concrete kernel capability to control script execution: a new execveat(2) AT_EXEC_CHECK flag plus prctl successors to O_MAYEXEC, and two new… | ||
| Landlock Config | Linux Security Summit Europe 2025 | 2025-08-28 |
Landlock Config defines a concrete, composable policy format implemented as JSON and TOML files plus a Rust library with C bindings that parses, composes and… | ||
| Linux Sandboxing with Landlock | LinuxCon @ OSS EU 2024 | 2024-09-16 |
Landlock enables unprivileged policy creation so a process defines a deny-by-default set, adds explicit exceptions via file-descriptor-based rules, then calls… | ||
| Linux Sandboxing with Landlock | Open Source Summit Europe 2024 | 2024-09-16 |
Landlock lets unprivileged processes declare and enforce least‑privilege policies at runtime by creating a ruleset, adding file and resource rules tied to open… | ||
| Update on Landlock: Audit, Debugging and Metrics | Linux Security Summit Europe 2023 | 2023-09-20 |
Landlock adds auditable denied-access logs via the Linux audit framework, showing rule-set id 1 creating domain id 2 and explicit EACCES (errno 13) denies with… | ||
| Landlock Workshop: Sandboxing Application for Fun and Protection | Linux Security Summit Europe 2023 | 2023-09-20 |
Workshop shows how to add Landlock syscalls to a C CLI to confine an old ImageMagick exploit: creates a ruleset with landlock_create_ruleset, adds specific… | ||
| Controlling Script Execution | Linux Security Summit North America 2023 | 2023-05-10 |
Proposal adds a kernel-managed execution check so interpreters can ask the kernel “is this file allowed to be executed” using a new faccessat mode XAV_OK that… | ||
| Heki: Hypervisor-Enforced Kernel Integrity for Linux with KVM | Linux Security Summit North America 2023 | 2023-05-10 |
Heki moves selected kernel self‑protections out of the kernel into a KVM hypervisor layer, providing a guest API and a KVM backend that uses EPT/MBAC… | ||
| LSM Maintainers Panel | Linux Security Summit North America 2023 | 2023-05-10 |
Panel argues that LSM stacking is the single most important change and shows progress toward composition but no final namespacing solution; eBPF-as-LSM is… | ||
| Update on Landlock: Lifting the File Reparenting Limits and Supporting Network Rules | Linux Security Summit North America 2022 | 2022-06-23 |
Landlock is in mainline since kernel 5.13 and gains a new file refer right that lets renames and links work without policy bypass by requiring… | ||
| Sandboxing Applications with Landlock | Open Source Summit + Embedded Linux Conference + OSPOCon 2021 | 2021-09-27 |
Landlock is a kernel feature (since Linux 5.13) that lets applications create composable, drop-only sandbox rules around filesystem actions using three… | ||
| How to Safely Restrict Access to Files in a Programmatic Way with Landlock? | Linux Security Summit North America 2018 | 2018-08-27 |
Landlock adds a user-space, unprivileged MAC that identifies files by inode via an eBPF inode map (filled from file descriptors) so sandboxed processes can… | ||
| nothing matches | ||