https://github.com/nicolast/landlock-hs

Haskell bindings for the Linux Landlock API
https://github.com/nicolast/landlock-hs

haskell haskell-library landlock linux sandbox sandboxing security

Last synced: 26 days ago
JSON representation

Haskell bindings for the Linux Landlock API

• Host: GitHub
• URL: https://github.com/nicolast/landlock-hs
• Owner: NicolasT
• License: bsd-3-clause
• Created: 2022-08-16T11:47:55.000Z (about 2 years ago)
• Default Branch: main
• Last Pushed: 2024-04-02T21:37:26.000Z (7 months ago)
• Last Synced: 2024-10-12T10:22:51.371Z (26 days ago)
• Topics: haskell, haskell-library, landlock, linux, sandbox, sandboxing, security
• Language: Haskell
• Homepage: https://hackage.haskell.org/package/landlock
• Size: 220 KB
• Stars: 8
• Watchers: 4
• Forks: 0
• Open Issues: 3
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# landlock-hs: Haskell bindings for the Linux Landlock API

The Linux kernel Landlock API provides unprivileged access control. The goal

of Landlock is to enable to restrict ambient rights (e.g. global filesystem

access) for a set of processes. Because Landlock is a stackable LSM, it makes

possible to create safe security sandboxes as new security layers in addition

to the existing system-wide access-controls. This kind of sandbox is expected

to help mitigate the security impact of bugs or unexpected/malicious

behaviors in user space applications. Landlock empowers any process,

including unprivileged ones, to securely restrict themselves.

This projects provides the following [Haskell](https://haskell.org) libraries

to use this API:

- [landlock](https://hackage.haskell.org/package/landlock), Haskell binding for

  the Linux Landlock API

- [psx](https://hackage.haskell.org/package/psx), a package to integrate

  [libpsx](https://git.kernel.org/pub/scm/libs/libcap/libcap.git/tree/psx) with

  the GHC RTS

For more information, see the [Landlock homepage](https://landlock.io/) and its

[kernel documentation](https://docs.kernel.org/userspace-api/landlock.html).