Go-Landlock is a Go library for the Landlock LSM, an unprivileged sandboxing mechanism on Linux.
Landlock is a Linux kernel feature and can restrict the following types of access:
- Filesystem access
- Some network operations
- Some IPC operations
More details and examples in the Go-Landlock documentation and the Linux Userspace API documentation for Landlock. The Landlock LSM was introduced with Linux 5.13 and is today enabled on most major Linux distributions.
In a Go program, after starting up and doing program initialization work, run:
err := landlock.V10.BestEffort().RestrictPaths(
landlock.RODirs("/usr", "/bin"),
landlock.RWDirs("/tmp"),
)
After this invocation, your program can only access the specified paths.
Goals of Go-Landlock are:
- Make unprivileged sandboxing easy to use and effective.
- Keep Go-Landlock's implementation at an easily auditable size.