News for hackers. Stuff that matters.

A comment on Landrun: Sandbox any Linux process using Landlock, no root or containers. Parent comment

Re:Landrun: Sandbox any Linux process using Landlock, no roo... by ranger_danger on Saturday March 22, 2025 @02:54PM (#43447753)
> I'd create an ephemeral tmpfs disk for each landlocked invocation

And now you've just invented firejail.

[ Parent | on HN ]
Re:Landrun: Sandbox any Linux process using Landlock, no roo... by nine_k on Saturday March 22, 2025 @03:07PM (#43447841)
UX-wise, yes. Internally firejail and landrun use different isolation APIs.
[ Parent | on HN ]
Re:Landrun: Sandbox any Linux process using Landlock, no roo... by ranger_danger on Saturday March 22, 2025 @05:36PM (#43448837)
Firejail supports Landlock though: https://github.com/netblue30/firejail/pull/6078
[ Parent | on HN ]