Comment by akdev1l
3 years ago
Presumably sshd itself used to lock down its own capabilities after a certain point of execution.
Removing the landlock means the daemon doesn’t lock itself down and will allow for better payload execution when they get to the exploitation stage.
I don’t think these two things are unrelated. I think they already had payloads in mind and realized this would be a hurdle.
No. OpenSSH doesn't use Landlock, and even if it did, this patch wouldn't affect it.
It's pretty impossible to lock down sshd. The restrictions are inherited by all ancestors. What would the sysadmin say if they find themselves in a restricted shell?
Providing answers to things you have no clue about is worse than providing no answer at all.