Hardening with Firejail, Landlock, and bubblewrap

Hardening with Firejail, Landlock, and bubblewrap #security #linux #bwrap #landlock #firejail advancedweb.hu/shorts/harde...

#psql, at least version 15.12, really likes `/etc/shadow` file. To such a degree that it tries to read it upon each invocation:

```
$ strace psql 2>&1 | grep /etc/shadow
openat(AT_FDCWD, "/etc/shadow", O_RDONLY|O_CLOEXEC) = -1 EACCES (Permission denied)
```

#auditd #bwrap #alerting #linux

1/