@landstrip/landstrip 0.17.6 → 0.17.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -3
- package/package.json +5 -5
package/README.md
CHANGED
|
@@ -22,10 +22,13 @@ npx landstrip -p policy.json cargo test
|
|
|
22
22
|
The npm package installs a small Node.js wrapper and a platform-specific native
|
|
23
23
|
binary package.
|
|
24
24
|
|
|
25
|
-
|
|
26
25
|
### Agent extensions
|
|
27
26
|
|
|
28
|
-
The bundled extensions integrate Landstrip with Pi and OpenCode
|
|
27
|
+
The bundled extensions integrate Landstrip with Pi and OpenCode. The Pi
|
|
28
|
+
extension sandboxes the main agent's Bash execution, provides OpenCode-compatible
|
|
29
|
+
primary agent selection, and runs subagents as full Pi RPC processes. Subagents
|
|
30
|
+
normally receive an outer Landstrip sandbox; explicitly disabling sandboxing
|
|
31
|
+
uses a warned process-only fallback:
|
|
29
32
|
|
|
30
33
|
```sh
|
|
31
34
|
pi install npm:pi-landstrip
|
|
@@ -49,7 +52,7 @@ details.
|
|
|
49
52
|
|
|
50
53
|
Landlock carves the denied subtrees out of the allowed roots, and then grants
|
|
51
54
|
`PATH_BENEATH` rules only for the surviving fragments. The denied path is never
|
|
52
|
-
added to the ruleset, and the kernel enforces the path
|
|
55
|
+
added to the ruleset, and the kernel enforces the path directly.
|
|
53
56
|
|
|
54
57
|
Seccomp is applied when a policy needs more than Landlock can express
|
|
55
58
|
statically, e.g. for many filesystem mutator syscalls, or when denials must be
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@landstrip/landstrip",
|
|
3
|
-
"version": "0.17.
|
|
3
|
+
"version": "0.17.7",
|
|
4
4
|
"description": "Sandbox runner using Landlock, Seatbelt, and AppContainer",
|
|
5
5
|
"license": "Apache-2.0 AND LGPL-2.1-or-later",
|
|
6
6
|
"homepage": "https://github.com/landstrip/landstrip#readme",
|
|
@@ -30,10 +30,10 @@
|
|
|
30
30
|
"LICENSE-LGPL-2.1"
|
|
31
31
|
],
|
|
32
32
|
"optionalDependencies": {
|
|
33
|
-
"@landstrip/landstrip-darwin-arm64": "0.17.
|
|
34
|
-
"@landstrip/landstrip-darwin-x64": "0.17.
|
|
35
|
-
"@landstrip/landstrip-linux-x64": "0.17.
|
|
36
|
-
"@landstrip/landstrip-win32-x64": "0.17.
|
|
33
|
+
"@landstrip/landstrip-darwin-arm64": "0.17.7",
|
|
34
|
+
"@landstrip/landstrip-darwin-x64": "0.17.7",
|
|
35
|
+
"@landstrip/landstrip-linux-x64": "0.17.7",
|
|
36
|
+
"@landstrip/landstrip-win32-x64": "0.17.7"
|
|
37
37
|
},
|
|
38
38
|
"publishConfig": {
|
|
39
39
|
"access": "public"
|