linneman
labs
building
breaking
observing
content
···
verified
home
/ selinux
Selinux
2026.07.20
Measuring the Blast Radius of a Root Daemon
The real confinement of a root daemon is the intersection of SELinux policy, systemd sandboxing, Linux capabilities, and DAC.