GitHub - Zouuup/landrun: Run any Linux process in a secure, unprivileged sandbox using Landlock LSM. Think firejail, but lightweight, user-friendly, and baked into the kernel.
landrun
A lightweight, secure sandbox for running Linux processes using Landlock LSM. Think firejail, but with kernel-level security and minimal overhead.
Features
🔒 Kernel-level security using Landlock LSM
🚀 Lightweight and fast execution
🛡️ Fine-grained access control for directories
🔄 Support for read and write paths
⚡ Optional execution permissions for allowed paths
🌐 TCP network access control (binding and connecting)
Demo
Requirements
Linux kernel 5.13 or later with Landlock LSM enabl...
Read more at github.com