Re: [oss-security] Island: Sandboxing tool powered by Landlock

Why would you publish it on github? Please consider codeberg or src hut.




Sent with Proton Mail secure email.

On Friday, December 5th, 2025 at 5:14 PM, Micka=C3=ABl Sala=C3=BCn =
<[email protected]> wrote:

>=20
>=20
> Hi,
>=20
> I just released Island, a sandboxing tool powered by Landlock:
> https://github.com/landlock-lsm/island
>=20
> Island makes Landlock practical for everyday workflows by acting as a
> high-level wrapper and policy manager. Developed alongside the kernel
> feature and its Rust libraries, it bridges the gap between raw security
> mechanisms and user activity through:
> - Zero-code integration: Runs existing binaries without modification.
> - Declarative policies: Uses TOML profiles instead of code-based rules.
> - Context-aware activation: Automatically applies security profiles
> based on your current working directory.
> - Full environment isolation: Manages isolated workspaces (XDG
> directories, TMPDIR) in addition to access control.
> - Transparent shell integration: Automatically sandboxes commands in
> your shell without changing your workflow.
> - Zero-privilege operation: No root access or special capabilities
> required.
> - Layered protection: Multiple profiles compose cleanly with
> deterministic ordering.
>=20
> It's a work in progress, so be careful.
>=20
> Feedback welcome!
>=20
> Regards,
> Micka=C3=ABl