feat: add Landlock sandbox for sidecar process isolation
SandboxConfig with RW/RO paths applied via pre_exec() in sidecar child process. Requires kernel 6.2+ with graceful fallback. Per-project toggle in SettingsTab. 9 unit tests.
This commit is contained in:
parent
548478f115
commit
b2c379516c
8 changed files with 363 additions and 12 deletions
|
|
@ -12,3 +12,4 @@ log = "0.4"
|
|||
portable-pty = "0.8"
|
||||
uuid = { version = "1", features = ["v4"] }
|
||||
dirs = "5"
|
||||
landlock = "0.4"
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue