{"id":13671646,"url":"https://github.com/landlock-lsm/rust-landlock","last_synced_at":"2025-05-15T10:01:41.513Z","repository":{"id":45670079,"uuid":"357653675","full_name":"landlock-lsm/rust-landlock","owner":"landlock-lsm","description":"A Rust library for the Linux Landlock sandboxing feature","archived":false,"fork":false,"pushed_at":"2025-04-23T14:54:47.000Z","size":238,"stargazers_count":122,"open_issues_count":16,"forks_count":13,"subscribers_count":5,"default_branch":"main","last_synced_at":"2025-04-23T15:47:21.970Z","etag":null,"topics":["landlock","linux","sandboxing","security"],"latest_commit_sha":null,"homepage":"https://crates.io/crates/landlock","language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/landlock-lsm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE-APACHE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2021-04-13T18:34:45.000Z","updated_at":"2025-04-23T14:54:51.000Z","dependencies_parsed_at":"2024-03-22T11:28:11.452Z","dependency_job_id":"030f5c68-ccd4-4870-9f40-33bd890e169b","html_url":"https://github.com/landlock-lsm/rust-landlock","commit_stats":{"total_commits":172,"total_committers":7,"mean_commits":"24.571428571428573","dds":0.07558139534883723,"last_synced_commit":"049ef733186d7e131ae151849e4f5a24cb4ba9d7"},"previous_names":[],"tags_count":5,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/landlock-lsm%2Frust-landlock","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/landlock-lsm%2Frust-landlock/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/landlock-lsm%2Frust-landlock/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/landlock-lsm%2Frust-landlock/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/landlock-lsm","download_url":"https://codeload.github.com/landlock-lsm/rust-landlock/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254319715,"owners_count":22051072,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["landlock","linux","sandboxing","security"],"created_at":"2024-08-02T09:01:15.334Z","updated_at":"2025-05-15T10:01:40.946Z","avatar_url":"https://github.com/landlock-lsm.png","language":"Rust","funding_links":[],"categories":["Rust"],"sub_categories":[],"readme":"# Rust Landlock library\n\nLandlock is a security feature available since Linux 5.13.\nThe goal is to enable to restrict ambient rights (e.g., global filesystem access) for a set of processes by creating safe security sandboxes as new security layers in addition to the existing system-wide access-controls.\nThis kind of sandbox is expected to help mitigate the security impact of bugs, unexpected or malicious behaviors in applications.\nLandlock empowers any process, including unprivileged ones, to securely restrict themselves.\nMore information about Landlock can be found in the [official website](https://landlock.io).\n\nThis Rust crate provides a safe abstraction for the Landlock system calls along with some helpers.\n\n## Use cases\n\nThis crate is especially useful to protect users' data by sandboxing:\n* trusted applications dealing with potentially malicious data\n  (e.g., complex file format, network request) that could exploit security vulnerabilities;\n* sandbox managers, container runtimes or shells launching untrusted applications.\n\n## Examples\n\nA simple example can be found with the\n[`path_beneath_rules()`](https://landlock.io/rust-landlock/landlock/fn.path_beneath_rules.html) helper.\nMore complex examples can be found with the\n[`Ruleset` documentation](https://landlock.io/rust-landlock/landlock/struct.Ruleset.html)\nand the [sandboxer example](examples/sandboxer.rs).\n\n## [Crate documentation](https://landlock.io/rust-landlock/landlock/)\n\n## Changelog\n\n* [v0.4.2](CHANGELOG.md#v042)\n* [v0.4.1](CHANGELOG.md#v041)\n* [v0.4.0](CHANGELOG.md#v040)\n* [v0.3.1](CHANGELOG.md#v031)\n* [v0.3.0](CHANGELOG.md#v030)\n* [v0.2.0](CHANGELOG.md#v020)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flandlock-lsm%2Frust-landlock","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Flandlock-lsm%2Frust-landlock","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flandlock-lsm%2Frust-landlock/lists"}