GitHub - Zouuup/landrun: Run any Linux process in a secure, unprivileged sandbox using Landlock LSM. Think firejail, but lightweight, user-friendly, and baked into the kernel.
landrun
A lightweight, secure sandbox for running Linux processes using Landlock LSM. Think firejail, but with kernel-level security and minimal overhead.
Features
๐ Kernel-level security using Landlock LSM
๐ Lightweight and fast execution
๐ก๏ธ Fine-grained access control for directories
๐ Support for read and write paths
โก Optional execution permissions for allowed paths
๐ TCP network access control (binding and connecting)
Demo
Requirements
Linux kernel 5.13 or later with Landlock LSM enabl...
Read more at github.com