Landrun: Sandbox any Linux process using Landlock, no root or containers

Viewed 44
Landlock is a new Linux kernel security feature enabling unprivileged processes to self-sandbox, but its usage has been limited due to a complex API. The `landrun` tool simplifies this process by providing a command-line interface for users to sandbox applications without requiring elevated permissions or complex configuration like SELinux or AppArmor. It offers features such as fine-grained access controls to files and network connections, promoting better security practices on Linux systems. The tool is lightweight and open for feedback, showcasing a growing trend in developer-friendly security solutions. However, there is skepticism regarding its practical application compared to existing solutions like `bwrap` and concerns about licensing restrictions with GPL v2.
0 Answers