Landrun: Sandbox any Linux process using Landlock, no root or containers

Re:Landrun: Sandbox any Linux process using Landlock, no roo... by rainworld on Saturday March 22, 2025 @02:24PM (#43447562)

  // If we have no rules, just return
  if len(rules) == 0 {
      log.Info("No sandbox rules to apply")
      return nil
  }

Really cool and well-written project, but I disagree with this choice: No rules should mean no rules (everything denied).

I would have suggested support for more fine-grained file/directory permissions—good to see that’s already planned.

[ Parent | on HN ]

Re:Landrun: Sandbox any Linux process using Landlock, no roo... by Zoup on Saturday March 22, 2025 @07:17PM (#43449469)

Yeah I agree with that, just release a new version that does that.

[ Parent | on HN ]

Re:Landrun: Sandbox any Linux process using Landlock, no roo... by rainworld on Sunday March 23, 2025 @11:13AM (#43453464)

Does Linux 6.8 in fact ship ABI v5? At least it’s not guaranteed (Ubuntu 24.04, 6.8.0-55-generic). This post suggests 6.10: https://lore.kernel.org/landlock/20240716.yui4Iezai8ae@digik...

[ Parent | on HN ]

Re:Landrun: Sandbox any Linux process using Landlock, no roo... by Zoup on Sunday March 23, 2025 @11:28AM (#43453562)

good catch, fixed.

[ Parent | on HN ]