Skip to content

v0.1.4

Compare
Choose a tag to compare
@Zouuup Zouuup released this 23 Mar 01:30
· 47 commits to main since this release

Added
Introduced --rox flag to allow read-only with execution access to specified paths.
Introduced --rwx flag to allow read-write with execution access to specified paths.
New config field: ExecutablePaths to explicitly define which paths can be executed.
getExecutableRights() helper for fine-grained executable access using Landlock.
pathInSlice() utility to avoid duplicating rules for overlapping path categories.

Changed
CLI no longer uses global --exec flag. Execution permissions are now path-specific via --rox and --rwx.
Updated Landlock rule generation logic to cleanly separate executable paths from read-only and read-write ones.
Enhanced debug logging around rule registration.

Removed
--exec CLI flag deprecated and removed.