@landstrip/landstrip 0.17.13 → 0.17.14

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +8 -3
  2. package/package.json +7 -7
package/README.md CHANGED
@@ -45,7 +45,7 @@ details.
45
45
  | ------------ | ------------------------ | ---------------------------- | ------------------------------- |
46
46
  | Policy | path based rules | file based rules | per-run AppContainer ACLs |
47
47
  | Timing | dynamic subset of paths | file based static ruleset | per-run ACL grants |
48
- | TCP | localhost proxy ports | loopback proxy ports | allow all or deny all |
48
+ | TCP | proxy or loopback | proxy or loopback | allow all or deny all |
49
49
  | Unix sockets | allowlist | allowlist via seccomp broker | allow all or deny all |
50
50
 
51
51
  ### Linux
@@ -136,8 +136,13 @@ by platform:
136
136
 
137
137
  ## Network Policy
138
138
 
139
- Sandbox mode denies direct network access by default. Proxy ports, local binding,
140
- and Unix sockets can be allowed with the Anthropic Sandbox Runtime network fields.
139
+ Sandbox mode denies direct network access by default. Proxy ports, loopback TCP
140
+ binding and connections, and Unix sockets can be allowed with the Anthropic
141
+ Sandbox Runtime network fields. `allowLocalBinding` permits both binding to and
142
+ connecting to loopback TCP addresses, including listeners started outside the
143
+ sandbox. Linux denies non-loopback connections. On macOS, Seatbelt's required
144
+ `localhost` matcher can also include addresses assigned to other local
145
+ interfaces, but public remote addresses remain denied.
141
146
 
142
147
  For a filesystem-only sandbox with unrestricted direct network access, set:
143
148
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@landstrip/landstrip",
3
- "version": "0.17.13",
3
+ "version": "0.17.14",
4
4
  "description": "Sandbox runner using Landlock, Seatbelt, and AppContainer",
5
5
  "license": "Apache-2.0 AND LGPL-2.1-or-later",
6
6
  "homepage": "https://github.com/landstrip/landstrip#readme",
@@ -30,12 +30,12 @@
30
30
  "LICENSE-LGPL-2.1"
31
31
  ],
32
32
  "optionalDependencies": {
33
- "@landstrip/landstrip-darwin-arm64": "0.17.13",
34
- "@landstrip/landstrip-darwin-x64": "0.17.13",
35
- "@landstrip/landstrip-linux-x64": "0.17.13",
36
- "@landstrip/landstrip-linux-arm64": "0.17.13",
37
- "@landstrip/landstrip-win32-x64": "0.17.13",
38
- "@landstrip/landstrip-win32-arm64": "0.17.13"
33
+ "@landstrip/landstrip-darwin-arm64": "0.17.14",
34
+ "@landstrip/landstrip-darwin-x64": "0.17.14",
35
+ "@landstrip/landstrip-linux-x64": "0.17.14",
36
+ "@landstrip/landstrip-linux-arm64": "0.17.14",
37
+ "@landstrip/landstrip-win32-x64": "0.17.14",
38
+ "@landstrip/landstrip-win32-arm64": "0.17.14"
39
39
  },
40
40
  "publishConfig": {
41
41
  "access": "public"