Landrun: Sandbox any Linux process using Landlock, no root or containers

Re:Landrun: Sandbox any Linux process using Landlock, no roo... by ranger_danger on Sunday March 23, 2025 @11:21AM (#43453517)

opensnitch does this

[ Parent | on HN ]

Re:Landrun: Sandbox any Linux process using Landlock, no roo... by y7 on Sunday March 23, 2025 @12:54PM (#43454109)

Are you sure? Because last I checked OpenSnitch used different techniques from namespaces, that seemed more brittle to me.

[ Parent | on HN ]

Re:Landrun: Sandbox any Linux process using Landlock, no roo... by ranger_danger on Sunday March 23, 2025 @05:49PM (#43456174)

I was referring to "request user permission interactively and adjust access accordingly"... it can do that. It uses eBPF though

[ Parent | on HN ]