search

google / sandboxed-api

Generate sandboxes for C/C++ libraries automatically
https://developers.google.com/sandboxed-api/
Apache License 2.0
1.65k stars 189 forks source link

Add Landlock support #174

Open fira959 opened 3 months ago

fira959 commented 3 months ago

One of the sandboxing features currently missing is landlock, which would allow for easy and comprehensive filesystem isolation. In many usecases, a combination of seccomp and landlock would make good alternative to the use of namespaces.