5 ms·

running cat isn't a --exec for one :)

• ranger_danger 1y ago
  how so? $ landrun --ro /usr/bin cat a [landrun:error] 2025/03/22 23:50:16 permission denied
  • Zoup 1y ago
    in this case doesn't have access to "a" wherever it is... $ landrun --ro /usr cat /usr/bin/ls | wc -l 400 executing ls (as in actual binary execution) will require --exec $ landrun --ro /usr ls /usr/bin/ ls: cannot open directory '/usr/bin/': Permission denied $ landrun --ro /usr --exec ls /usr/bin/ list of billions of files note that I don't really love the --exec thingy, if it's not "on" by default it's just for sake of being explicit. Update: there's a bug to limit "file access", which I'll fix asap. Update2: Adding a --exec-path instead to limit executable, it wasn't the best idea to have a global --exec anyway Update3: Have a look at V0.1.4, I think it's far cleaner now.
    • ranger_danger 1y ago
      --ro /usr does not apply to /usr/bin. change it to --ro /usr/bin and then cat will refuse to run.
      • Zoup 1y ago
        it's recursive by default
        • ranger_danger 1y ago
          well it's not working. please try it
          • Zoup 1y ago
            give it a try with v0.10: landrun --rox /usr/ --ro /usr/lib ls /usr/bin/