• tumbling4986@lemmy.caOPM
      1·
      28 days ago

      Actually, they operate at completely different layers of the Linux system and solve different problems.

      Landlock sandboxes userspace apps from the rest of the OS, while Kage sandboxes kernel modules from the rest of the kernel.

      • Pomal@sh.itjust.works
        2·
        28 days ago

        Poor wording on my part - should have probably went w mesh. They’re a part of a defense in depth startegy so coming from that lense is more of my path of inquiry.