The Landrun project develops a non-privileged application isolation system.
The Landrun project has started developing a new system for isolated execution of individual applications. For isolation, the Landlock LSM module of the Linux kernel is used, allowing the creation of a sandbox environment without performing privileged operations. In its tasks, Landrun is similar to the Firejail utility, but distinguishes itself with a simpler implementation, lightweight nature, and the ability to operate under a regular unprivileged user without being supplied with the suid flag. Code […]
