Landrun: A Lightweight, Kernel-Level Secure Sandbox for Linux
Landrun is a lightweight and secure sandbox for running Linux processes, leveraging the kernel-native Landlock security module. It offers fine-grained control over filesystem and network access without requiring root privileges, containers, or complex SELinux/AppArmor configurations. Landrun provides read, write, and execute permissions for files and directories, along with TCP network access control. It's highly configurable and supports Linux kernels 5.13+ (network restrictions require 6.7+). With clear examples and systemd integration, Landrun makes it easy to securely run commands and services with enhanced security.
Read more