landlock

Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.

Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.

Lightweight, container-free sandbox for running commands with network and filesystem restrictions

The lightest AI sandbox. A process-based sandbox for Linux, no container, no VM, no privilege, no prompt injection

A Go library for the Linux Landlock sandboxing feature

A Rust library for the Linux Landlock sandboxing feature

Container-free, deny-by-default sandbox for AI coding agents. Kernel-enforced filesystem, network, and syscall isolation for Linux and macOS

Run AI coding agents in hardened container sandboxes.

Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp.

A lightweight command sandbox for Linux, secure-by-default, built on Landlock.

Linux kernel - See Landlock issues

OpenBSD unveil(2) like function in Linux using Landlock

Go filesystem isolation via Linux landlock sandbox

炼妖壶 — run Claude Code, Codex, or any coding agent in a deny-default sandbox with VPN-only network egress. sandbox-exec + PF on macOS, Landlock/seccomp + iptables on Linux.

Painless Linux sandboxing API

Daemon-less OS security boundary & sandbox for AI coding agents (Codex, Claude Code, Cursor, Aider)

Restrict process execution and file access in Kubernetes Pods with Landlock

Set of modifications for Deno to add subprocess sandboxing

A command line tool for playing with Linux 5.13's Landlock feature