macOS
Homebrew已验证 · 100%
brew install landrunlocal Homebrew formula metadata
安装
其他安装命令
Linux
Nix已验证 · 92%
nix profile install nixpkgs#landrunnixpkgs package indexes · pkgs/by-name/la/landrun/package.nix · 来源: api.github.com
概览
软件包摘要
Lightweight, secure sandbox for running Linux processes using Landlock LSM
项目链接
命令和别名
- landrun
历史
项目历史与用法
Landrun is a small Linux command-line sandbox that wraps the kernel Landlock security module so ordinary users can run a process with explicit filesystem and TCP access rules.
项目历史
The project appeared publicly in March 2025 with early 0.1.x releases. Its README frames it as a practical front end for Landlock: no root, no containers, no SELinux or AppArmor policy files, and a command-line flag model for read, write, execute, bind, and connect permissions.
The early release stream quickly refined the access model. Version 0.1.3, released on 2025-03-22, added a deny-all behavior when no sandbox rules are provided. Version 0.1.4, released on 2025-03-23, replaced a global execution flag with path-specific execution permissions. Version 0.1.10, released on 2025-03-23, expanded Landlock permission coverage and tests, and version 0.1.14, released on 2025-04-03, added helper flags for dynamically linked executables.
采用历史
Landrun's adoption signal is mainly package-nerd and security-tool visibility rather than a long institutional history. The upstream README lists distro packaging for Arch AUR and SlackBuilds, and the Homebrew formula places it in the macOS/Linux package-manager ecosystem even though the underlying sandbox requires Linux Landlock support.
使用方式
Typical usage is to prefix another command with `landrun` and add only the paths and TCP ports that process should access. The README also documents a systemd integration pattern for wrapping services such as nginx with reduced filesystem and network permissions.
为什么软件包爱好者会关心
For package collectors, Landrun is notable because it turns a relatively obscure kernel LSM into a normal CLI tool. It sits near tools such as firejail and bubblewrap, but its hook is using unprivileged, kernel-native Landlock rules with a small Go implementation.
时间线
- 2025-03-22: v0.1.3 release documented deny-all behavior when no sandbox rules are supplied.
- 2025-03-23: v0.1.4 release introduced path-specific execution permissions.
- 2025-03-23: v0.1.10 release expanded Landlock permission coverage and test coverage.
- 2025-04-03: v0.1.14 release added `--ldd` and `--add-exec` helper flags.
Related projects
- Related projects include the Linux Landlock LSM, the go-landlock bindings used by Landrun, and user-facing Linux sandbox tools such as firejail and bubblewrap.
来源
安全态势
风险级别：绿色
narrow executable package without higher-risk signals.
风险分类器
绿色 风险 · 低 置信度 · appliance
原因
- narrow executable package without higher-risk signals
信号
- metadata:no-higher-risk-signals
安装行为
- 未记录 Homebrew bottle 元数据。
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
landrun | 可执行文件 | 已索引可执行文件 | 从本地可执行文件索引发现。 |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-08-03
管理器版本0.1.17
管理器更新时间2026-07-26
本地数据未知
上游不可用
检测到的最新版本未检测到
- OK没有生成新鲜度警告。
安装元数据
软件包元数据
| 软件包键 | brew:landrun |
|---|---|
| 版本 | 0.1.17 |
| 软件包管理器 | Homebrew |
| 主页 | https://github.com/Zouuup/landrun |
| 仓库 | https://github.com/Zouuup/landrun |
| 最后更新 | 2026-07-26T13:40:58+02:00 |
| Pulse | updated |
| Bottle | 未记录 |
| 服务 | 未声明 |
源数据库匹配
其他软件包管理器记录
匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。
Nix95%
landrun
nix profile install nixpkgs#landrun- normalized package name match
- 匹配方式：Landrun
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Geiger risk classifier
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- pkg.so package database
- pkgdb category and tag curation