restrict

Documentation

Overview

Package restrict enables programs to utilize the Landlock Linux Security Module (LSM) for sandboxing on supported systems.

On systems where Landlock is not available, this package will have no effect.

Index

• func Do(ctx context.Context, rules ...landlock.Rule)

Functions

func Do

func Do(ctx context.Context, rules ...landlock.Rule)

Do applies the provided set of landlock.Rule to restrict all goroutines within the program.

If sandboxing fails, a log message will be generated, but the program will continue execution.