landdown
Simple Sandboxing for shell scripts.
git clone git://mccd.space/landdown
| Log | Files | Refs | README | LICENSE |
commit 15eff00945c87cb6d88da0472e896ae76b68c3ac parent 4296518e5c6d1121d16aef99eb4ab80d6db34b2b Author: Marc <marc@coquand.email> Date: Tue, 30 Jun 2026 10:49:21 +0200 * Diffstat:
| M | README | | | 28 | ++++++++++++++-------------- |
| M | pre-commit.sh | | | 2 | +- |
2 files changed, 15 insertions(+), 15 deletions(-)
diff --git a/README b/README
@@ -1,12 +1,12 @@
-landdown(1) General Commands Manual landdown(1)
+landdown(1) General Commands Manual landdown(1)
-NNAAMMEE
+NAME
Landdown - Simple shell script sandbox
-DDEESSCCRRIIPPTTIIOONN
+DESCRIPTION
Landdown is an easy-to-use utility for Linux that allows you to sandbox
shell scripts with Landlock. Just like Landlock, Landdown "aims to
protect you against the security impacts of bugs or
@@ -29,7 +29,7 @@ DDEESSCCRRIIPPTTIIOONN
-SSUUPPPPOORRTTEEDD RRUULLEESS
+SUPPORTED RULES
rof <file>
rwf <file>
ro <dir>
@@ -49,15 +49,15 @@ SSUUPPPPOORRTTEEDD RRUULLEESS
<script content...>
-IINNSSTTAALLLL
+INSTALL
go install git.sr.ht/~marcc/landdown@latest
Arch Linux <https://aur.archlinux.org/packages/landdown-git>
-EEXXAAMMPPLLEESS
- AAcccceessss aa ffiillee
+EXAMPLES
+ Access a file
Write the following script
#!/usr/bin/env landdown
@@ -75,7 +75,7 @@ EEXXAAMMPPLLEESS
/tmp/some-file.txt to test.
- NNeettwwoorrkk aacccceessss
+ Network access
Write the following script
#!/usr/bin/env landdown
@@ -92,20 +92,20 @@ EEXXAAMMPPLLEESS
should fail. Network access needs to be explicitly set.
-CCOONNTTRRIIBBUUTTIIOONNSS
+CONTRIBUTIONS
Contributions are welcome. Please send them to my public inbox
<~marcc/public-inbox@lists.sr.ht>
-SSEEEE AALLSSOO
- sshh(1) - section on ulimit
+SEE ALSO
+ sh(1) - section on ulimit
Good Practices <https://docs.kernel.org/userspace-
api/landlock.html#good-practices>
- AAlltteerrnnaattiivveess
- bbuubbbblleewwrraapp(1) ffiirreejjaaiill(1) llaannddrruunn(1)
+ Alternatives
+ bubblewrap(1) firejail(1) landrun(1)
- 2026-06-30 landdown(1)
+ 2026-06-30 landdown(1)
diff --git a/pre-commit.sh b/pre-commit.sh
@@ -1,5 +1,5 @@
#!/bin/sh
# Add to your hooks
# ln -sf ../../pre-commit.sh .git/hooks/pre-commit
-man -l landdown.1 > README
+man -l landdown.1 | col -b > README
git add README