This is the second part of an article about Linux Security Modules. You may want to read part one first.

I recently developed a tiny Linux Security Module (LSM) and I’d like to describe a bit how the LSM framework works. Indeed, there isn’t much documentation available except some papers from many years ago and LSM has changed a lot since that time. I delved a little into it and I think I can point out some basics that might help someone understand how the current implementation of LSM works.

A demonstration showing how one can leverage Linux namespaces to create a very basic container.