nice!!! I'm starting to use https://slackbuilds.org/repository/15.0/network/landrun/ on #slackware current.

#Landrun (Think #firejail, but with kernel-level security and minimal overhead)

CC: @frogfroggy@fosstodon.org

Im Kernel gibt es schon seit einiger Zeit das Landlock-Modul, über das sich normale Programme selbst gezielt einige (Zugriffs-)Rechte entziehen können. Diese Möglichkeiten nutzt das Tool Landlock, um andere Prozesse in ein Gefängnis zu sperren.#Landlock #Landrun #Sandbox
Landrun sperrt Prozesse performant mit Landlock ein - LinuxCommunity

Exciting news for #Slackware users!

The Landrun tool is now available in SlackBuildsOrg!

Landrun A lightweight, secure sandbox for running Linux processes using Landlock.
Think firejail, but with kernel-level security and minimal overhead.

Get it here:
https://slackbuilds.org/repository/15.0/network/landrun/

#Linux #Slackware #landlock #OpenSource #landrun

Another LSM we don't talk enough about
https://github.com/Zouuup/landrun

The landlock LSM isn't frequently spoken about, it's Linux equivalent of OpenBSD unveil. See also "Following landlock development" in 204, "Landlock" in 161 among others. Or what I've written about it.(https://venam.net/blog/unix/2023/02/28/access_control.html#landlock--seccomp)

Love Linux/Unix? Subscribe to the Nixers Newsletter: https://newsletter.nixers.net/entries.php !
#landlock #landrun #linux #openbsd