Bug#1120073: RFP: landrun -- unprivileged Linux process sandboxing
Package: wnpp
Severity: wishlist
X-Debbugs-Cc: Simon Josefsson <simon@josefsson.org>
* Package name : landrun
Version : 0.1.15
Upstream Author : Armin ranjbar
* URL : https://github.com/zouuup/landrun
* License : MIT
Programming Lang: Go
Description : unprivileged Linux process sandboxing
Run any Linux process in a secure, unprivileged sandbox using
Landlock. Think firejail, but lightweight, user-friendly, and baked into
the kernel.
Requires Linux kernel 5.13 or later with Landlock enabled, Linux kernel
6.7 or later for network restrictions (TCP bind/connect) and Go 1.18 or
later (for building from source).
This tool got some press coverage earlier in
<URL: https://linux.slashdot.org/story/25/04/05/217212/landrun-lightweight-linux-sandboxing-with-landlock-no-root-required >.
This is related to <URL: https://bugs.debian.org/1096137 > for packaging
golang-github-landlock-lsm-go-landlock, and I suspect
golang-github-landlock-lsm-go-landlock is a dependency of landrun.
--
Happy hacking
Petter Reinholdtsen
Reply to: