@landstrip/landstrip 0.17.39 → 0.17.41
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +11 -0
- package/package.json +7 -7
package/README.md
CHANGED
|
@@ -158,6 +158,17 @@ network:
|
|
|
158
158
|
allowNetwork: true
|
|
159
159
|
```
|
|
160
160
|
|
|
161
|
+
### Executable policy
|
|
162
|
+
|
|
163
|
+
Supplementary policy can be attached directly to a tool's executable inode:
|
|
164
|
+
- **Unix**: `user.landstrip.policy` extended attribute (`xattr`).
|
|
165
|
+
- **Windows**: `landstrip.policy` NTFS alternate data stream (`ADS`).
|
|
166
|
+
|
|
167
|
+
When present, the attribute contents are parsed and merged to the policy. The
|
|
168
|
+
executable is resolved via `PATH` lookup and canonicalized so policy attributes
|
|
169
|
+
are always read from the real binary inode. If an attribute exists but is
|
|
170
|
+
unreadable or malformed, tool execution is aborted.
|
|
171
|
+
|
|
161
172
|
## Filesystem policy
|
|
162
173
|
|
|
163
174
|
Write access is denied by default. `allowWrite` paths grant write access and
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@landstrip/landstrip",
|
|
3
|
-
"version": "0.17.
|
|
3
|
+
"version": "0.17.41",
|
|
4
4
|
"description": "Sandbox runner using Landlock, Seatbelt, and AppContainer",
|
|
5
5
|
"license": "Apache-2.0 AND LGPL-2.1-or-later",
|
|
6
6
|
"homepage": "https://github.com/landstrip/landstrip#readme",
|
|
@@ -30,12 +30,12 @@
|
|
|
30
30
|
"LICENSE-LGPL-2.1"
|
|
31
31
|
],
|
|
32
32
|
"optionalDependencies": {
|
|
33
|
-
"@landstrip/landstrip-darwin-arm64": "0.17.
|
|
34
|
-
"@landstrip/landstrip-darwin-x64": "0.17.
|
|
35
|
-
"@landstrip/landstrip-linux-x64": "0.17.
|
|
36
|
-
"@landstrip/landstrip-linux-arm64": "0.17.
|
|
37
|
-
"@landstrip/landstrip-win32-x64": "0.17.
|
|
38
|
-
"@landstrip/landstrip-win32-arm64": "0.17.
|
|
33
|
+
"@landstrip/landstrip-darwin-arm64": "0.17.41",
|
|
34
|
+
"@landstrip/landstrip-darwin-x64": "0.17.41",
|
|
35
|
+
"@landstrip/landstrip-linux-x64": "0.17.41",
|
|
36
|
+
"@landstrip/landstrip-linux-arm64": "0.17.41",
|
|
37
|
+
"@landstrip/landstrip-win32-x64": "0.17.41",
|
|
38
|
+
"@landstrip/landstrip-win32-arm64": "0.17.41"
|
|
39
39
|
},
|
|
40
40
|
"publishConfig": {
|
|
41
41
|
"access": "public"
|