From 7eb17df0a722c251f0697821b20450e1478142f3 Mon Sep 17 00:00:00 2001 From: Riley Beckett Date: Mon, 27 Jul 2026 01:01:18 -0400 Subject: add some sandboxing code --- snag/src/sandboxing.h | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 snag/src/sandboxing.h (limited to 'snag/src/sandboxing.h') diff --git a/snag/src/sandboxing.h b/snag/src/sandboxing.h new file mode 100644 index 0000000..4b7adfc --- /dev/null +++ b/snag/src/sandboxing.h @@ -0,0 +1,15 @@ +#ifndef SANDBOXING_H +#define SANDBOXING_H +#include +#include + +// returns -1 for error +int create_new_landlock_ruleset(struct landlock_ruleset_attr* ruleset_attr); + +// returns false for error +bool landlock_add_path_rule(int landlock_fd, const struct landlock_ruleset_attr* ruleset_attr, const char* path, struct landlock_path_beneath_attr* path_beneath); +// closes landlock_fd +// returns false for error +bool landlock_enforce(int landlock_fd); + +#endif // SANDBOXING_H -- cgit v1.2.3