summaryrefslogtreecommitdiff
path: root/README
blob: 51e1f3b4459d569b49e88c909dabb41a5b325727 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
run_landlock - Execute a command in Landlock
--------------------------------------------
`run_landlock` executes a command inside a Landlock sandbox environment.

The purpose of `run_landlock` is to transparently expose as much of the Landlock
subsystem as possible to shells and other programs. `run_landlock` is a thinner
wrapper than `landrun <https://github.com/Zouuup/landrun>`, and since it's
written in C, it's also more portable and easier to distribute.

Requirements
------------
Landlock must be supported and enabled on your system and must provide a
recent-enough ABI depending on the required Landlock features.

Installation
------------
Edit `config.mk` to match your local setup (`run_landlock` installs into the
`/usr/local` namespace by default).

Then enter the following command to build and install `run_landlock` (as root if
necessary):

	make clean install

Running run_landlock
--------------------
Usage:

	run_landlock [-hv] [[-r type subject actions] ...] command [args ...]

See the man page for additional details.

Contact
-------
B. Bergeron <[email protected]>