News for hackers. Stuff that matters.

A comment on Landrun: Sandbox any Linux process using Landlock, no root or containers. Parent comment

Re:Landrun: Sandbox any Linux process using Landlock, no roo... by nolist_policy on Saturday March 22, 2025 @03:58PM (#43448189)
> My biggest problem with Linux is that there are no per-process firewall settings.

There is, with cgroups: https://www.kernel.org/doc/Documentation/cgroup-v1/net_cls.t...

[ Parent | on HN ]
Re:Landrun: Sandbox any Linux process using Landlock, no roo... by NewJazz on Saturday March 22, 2025 @07:22PM (#43449509)
Is there an example of this that uses cgroup2?
[ Parent | on HN ]
Re:Landrun: Sandbox any Linux process using Landlock, no roo... by zokier on Sunday March 23, 2025 @08:50AM (#43452551)
https://www.freedesktop.org/software/systemd/man/latest/syst...
[ Parent | on HN ]