Hacker News new | ask | show | jobs
by Zoup 448 days ago
running cat isn't a --exec for one :)
1 comments

how so?

$ landrun --ro /usr/bin cat a

[landrun:error] 2025/03/22 23:50:16 permission denied

in this case doesn't have access to "a" wherever it is...

$ landrun --ro /usr cat /usr/bin/ls | wc -l

400

executing ls (as in actual binary execution) will require --exec

$ landrun --ro /usr ls /usr/bin/

ls: cannot open directory '/usr/bin/': Permission denied

$ landrun --ro /usr --exec ls /usr/bin/

list of billions of files

note that I don't really love the --exec thingy, if it's not "on" by default it's just for sake of being explicit.

Update: there's a bug to limit "file access", which I'll fix asap.

Update2: Adding a --exec-path instead to limit executable, it wasn't the best idea to have a global --exec anyway

Update3: Have a look at V0.1.4, I think it's far cleaner now.

--ro /usr does not apply to /usr/bin. change it to --ro /usr/bin and then cat will refuse to run.
it's recursive by default
well it's not working. please try it
give it a try with v0.10: landrun --rox /usr/ --ro /usr/lib ls /usr/bin/