Landrun: Sandbox any Linux process using Landlock, no root or containers(github.com)
460 points by Zoup | 155 comments
GitHub repository for landrun, a Go tool that runs Linux processes in an unprivileged sandbox using the Landlock LSM, with filesystem and network restrictions.