#landlock on Hacker News

2 stories tagged landlock, newest first.

Screenshot of github.com: Landrun: Sandbox any Linux process using Landlock, no root or containers

Landrun: Sandbox any Linux process using Landlock, no root or containers (github.com)

460 points by Zoup 1 year ago | 155 comments

GitHub repository for landrun, a Go tool that runs Linux processes in an unprivileged sandbox using the Landlock LSM, with filesystem and network restrictions.

landlock linux sandboxing go

Screenshot of git.tukaani.org: Xz: Can you spot the single character that disabled Linux landlock?

Xz: Can you spot the single character that disabled Linux landlock?(git.tukaani.org)

478 points by dhx 2 years ago | 268 comments

A gitweb diff of xz's CMakeLists.txt adding a Landlock sandbox feature test, which contains a stray '.' character that silently breaks the check and disables Landlock.

xz-utils xz-backdoor landlock cmake

#landlock on Hacker News

Landrun: Sandbox any Linux process using Landlock, no root or containers(github.com)

Xz: Can you spot the single character that disabled Linux landlock?(git.tukaani.org)

Landrun: Sandbox any Linux process using Landlock, no root or containers (github.com)