landdown
Simple Sandboxing for shell scripts.
git clone git://mccd.space/landdowncommit d14062520835e65401267796299696ba9f3d942b
parent 10e932777e52575a5ae1ff41946ae71448cde4df
Author: Marc <marc@coquand.email>
Date: Tue, 31 Mar 2026 19:03:22 +0200
README
Diffstat:
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/README.md b/README.md
@@ -47,7 +47,7 @@ Try removing `rwf /tmp/some-file.txt` and the script should fail.
Note: the file need to exist in order for landdown to work, run `touch /tmp/some-file.txt` to test.
-### Curl
+### Network access
```sh
#!/usr/bin/env landdown
@@ -56,11 +56,11 @@ ro /lib
ro /etc/ssl
rof /etc/resolv.conf
connect 443
-#!/bin/sh
+#!/bin/bash
curl https://www.google.com
```
-Try removing `ro /etc/ssl`, `rof /etc/resolv.conf`, or `connect 443` and it should fail.
+Try removing `ro /etc/ssl`, `rof /etc/resolv.conf`, or `connect 443` and it should fail. Network access needs to be explicitly set.
## Supported rules