Hacker News new | ask | show | jobs
by aw4y 450 days ago
nice! it would be cool (since it's in Go) how to use it like a library, sandboxing some exec directly from your code.
2 comments

(Author of that library here)

It is a library, as already linked in the other comment: https://github.com/landlock-lsm/go-landlock

The landrun tool is built on the same library. We also provide an official library for Rust, and obviously you can do it from C as well.

I also collected some libraries for other languages at https://wiki.gnoack.org/SoftwareUsingLandlock (but I can not vouch for their quality in detail)

Great job on the lib, thank you!