Re: Landstrip
Jarkko Sakkinen <[email protected]> Wed, 10 Jun 2026 12:46:44 +0300
| Newsgroups | dev.linux.lists.landlock |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Jun 10, 2026 at 12:41:03PM +0300, Jarkko Sakkinen wrote: I'm not sure if I fully understand this. > > I modified my client to temporarily use syscalls with the plan to return > back using it as soon as it has all the features. > > It is only small portion of the implementation so it really is not a big > deal. There's also Window and macOS. > > I.e. it is internal code for the client not a sloppy fork and I can > do git revert + integration once there is the feature available. > > I have direct FFI also on macOS and Win32. And I'm obviously returning back to your crate in future. No intention to maintain syscall wrappers in long-term but right now just for testing stuff it was useful temporal solution. For the spec I'm mapping against see: https://github.com/anthropic-experimental/sandbox-runtime I saw the code and realized that it does not have anything for Windows and Seatbelt and Bubblewrap do not pair too well so I decided to make a fully parametrized version of it so that it could be swapped as internals for ASR. I don't have Claude Code installed on any of my machines but since that policy has high spread it seemed like worth of focusing into as an app sandboxing policy. I.e. probably could be used in most of coding agents. So.. I don't think there's any problem here really. BR, Jarkko