From 4addcd2a4163f0767ec1ed696ac7eae49d55c8ff Mon Sep 17 00:00:00 2001 From: "B. Bergeron" Date: Wed, 16 Jul 2025 00:17:00 -0400 Subject: Initial commit --- README | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 README (limited to 'README') diff --git a/README b/README new file mode 100644 index 0000000..a4eab30 --- /dev/null +++ b/README @@ -0,0 +1,35 @@ +run_landlock - Execute a command in Landlock +-------------------------------------------- +`run_landlock` executes a command inside a Landlock sandbox environment. + +The purpose of `run_landlock` is to transparently expose as much of the Landlock +subsystem as possible to shells and other programs. `run_landlock` is a thinner +wrapper than `landrun `, and since it's +written in C, it's also more portable and easier to distribute. + +Requirements +------------ +Landlock must be supported and enabled on your system and must provide a +recent-enough ABI depending on the required Landlock features. + +Installation +------------ +Edit `config.mk` to match your local setup (`run_landlock` installs into the +`/usr/local` namespace by default). + +Then enter the following command to build and install `run_landlock` (as root if +necessary): + + make clean install + +Running run_landlock +-------------------- +Usage: + + run_landlock [-h] [[-r type subject actions] ...] command [args ...] + +See the man page for additional details. + +Contact +------- +B. Bergeron -- cgit v1.2.3