landrun은(는) 무료로 사용할 수 있나요? 라이선스는 무엇인가요?

landrun은(는) MIT 라이선스의 오픈소스입니다. 상업용 제품에 사용하기 전에 라이선스 조건을 확인하세요.

landrun은(는) 아직 유지보수되고 있나요?

활발히 유지보수 중. landrun의 마지막 커밋은 2026년 10월 16일입니다.

landrun은(는) 어디에 사용할 수 있나요?

Confining an untrusted build step, script or third-party binary so it cannot read secrets or reach the network. Running a web server or daemon with access limited to its config, log and web root directories. Restricting a CLI tool to specific ports or a single database socket. Hardening systemd services without writing a full container or MAC policy.

landrun은(는) 어디서 받을 수 있나요?

소스 코드와 설치 방법은 GitHub에 있습니다: https://github.com/Zouuup/landrun

Zouuup/landrun

A lightweight CLI that runs any Linux process in an unprivileged sandbox using Landlock, with fine-grained filesystem and network controls.

대체할 수 있는 제품:Firejail

GitHub에서 보기

스타: 2,322
포크: 55
열린 이슈: 4
마지막 커밋: 6일 전

어떤 프로젝트인가요?

Landrun is a command-line tool that runs a Linux process inside a sandbox built on Landlock, a kernel-native security module that lets unprivileged processes restrict themselves. It requires no root privileges, no containers, and no SELinux or AppArmor policy files. You wrap a command with landrun and list the paths and ports it may use.

Access rules are set per path with flags such as --ro, --rw, --rox and --rwx, and per port with --bind-tcp, --connect-tcp, --bind-udp and --connect-udp. The tool also covers pathname UNIX socket connections, abstract UNIX socket and signal scoping, and audit logging of Landlock denials. Support depends on the kernel: TCP restrictions need Linux 6.7 or later, and UDP restrictions need 7.2 or later. The --best-effort flag lets it fall back to the features an older kernel supports.

If no rules are given and no unrestricted flag is set, landrun denies all access. Environment variables are not passed to the child process unless requested with --env.

핵심 기능

01Runs any Linux command in a Landlock sandbox without root or containers.
02Controls read, write and execute access per file or directory.
03Restricts TCP and UDP bind and connect operations by port or port range.
04Supports pathname UNIX socket access control and IPC scoping.
05Logs Landlock denials for auditing, on supported kernels.
06Uses --best-effort to degrade gracefully on older kernels.

활용 사례

Confining an untrusted build step, script or third-party binary so it cannot read secrets or reach the network.
Running a web server or daemon with access limited to its config, log and web root directories.
Restricting a CLI tool to specific ports or a single database socket.
Hardening systemd services without writing a full container or MAC policy.

토픽

#sandbox #landlock #linux #security #process-isolation #cli #least-privilege #golang #kernel #sandbox-environment

자주 묻는 질문

landrun은(는) 무엇인가요?: A lightweight CLI that runs any Linux process in an unprivileged sandbox using Landlock, with fine-grained filesystem and network controls. Landrun is a command-line tool that runs a Linux process inside a sandbox built on Landlock, a kernel-native security module that lets unprivileged processes restrict themselves. It requires no root privileges, no containers, and no SELinux or AppArmor policy files. You wrap a command with landrun and list the paths and ports it may use.
landrun은(는) 무료로 사용할 수 있나요? 라이선스는 무엇인가요?: landrun은(는) MIT 라이선스의 오픈소스입니다. 상업용 제품에 사용하기 전에 라이선스 조건을 확인하세요.
landrun은(는) 아직 유지보수되고 있나요?: 활발히 유지보수 중. landrun의 마지막 커밋은 2026년 10월 16일입니다.
landrun은(는) 어디에 사용할 수 있나요?: Confining an untrusted build step, script or third-party binary so it cannot read secrets or reach the network. Running a web server or daemon with access limited to its config, log and web root directories. Restricting a CLI tool to specific ports or a single database socket. Hardening systemd services without writing a full container or MAC policy.
landrun은(는) 어디서 받을 수 있나요?: 소스 코드와 설치 방법은 GitHub에 있습니다: https://github.com/Zouuup/landrun

요약은 프로젝트 README를 바탕으로 AI가 작성했습니다. GitHub 통계는 매일 갱신됩니다.