landlock: Haskell bindings for the Linux Landlock API

This is a package candidate release! Here you can preview how this package release will appear once published to the main package index (which can be accomplished via the 'maintain' link below). Please note that once a package has been published to the main package index it cannot be undone! Please consult the package uploading documentation for more information.

[maintain] [Publish]

This library exposes Haskell bindings for the Linux kernel Landlock API.

The Linux kernel Landlock API provides unprivileged access control. The goal of Landlock is to enable to restrict ambient rights (e.g. global filesystem access) for a set of processes. Because Landlock is a stackable LSM, it makes possible to create safe security sandboxes as new security layers in addition to the existing system-wide access-controls. This kind of sandbox is expected to help mitigate the security impact of bugs or unexpected/malicious behaviors in user space applications. Landlock empowers any process, including unprivileged ones, to securely restrict themselves.

For more information, see the Landlock homepage and its kernel documentation.


[Skip to Readme]

Properties

Versions 0.1.0.0, 0.2.0.0, 0.2.0.0, 0.2.0.1, 0.2.1.0, 0.2.1.1
Change log CHANGELOG.md
Dependencies base (>=4.14.2.0 && <4.17), exceptions (>=0.10.4 && <0.11), landlock, psx (>=0.1 && <0.2), unix (>=2.7.2.2 && <2.8) [details]
License BSD-3-Clause
Copyright (c) 2022 Nicolas Trangez
Author Nicolas Trangez
Maintainer ikke@nicolast.be
Category System
Home page https://github.com/NicolasT/landlock-hs
Bug tracker https://github.com/NicolasT/landlock-hs/issues
Source repo head: git clone https://github.com/NicolasT/landlock-hs.git -b main(landlock)
Uploaded by NicolasTrangez at 2022-08-24T16:23:55Z

Modules

Downloads

Maintainer's Corner

Package maintainers

For package maintainers and hackage trustees


Readme for landlock-0.2.0.0

[back to package description]

landlock-hs: Haskell bindings for the Linux Landlock API

This library exposes Haskell bindings for the Linux kernel Landlock API.

The Linux kernel Landlock API provides unprivileged access control. The goal of Landlock is to enable to restrict ambient rights (e.g. global filesystem access) for a set of processes. Because Landlock is a stackable LSM, it makes possible to create safe security sandboxes as new security layers in addition to the existing system-wide access-controls. This kind of sandbox is expected to help mitigate the security impact of bugs or unexpected/malicious behaviors in user space applications. Landlock empowers any process, including unprivileged ones, to securely restrict themselves.

For more information, see the Landlock homepage and its kernel documentation.