Sandbox for i2pd

Go to file

dietshasta ee292906cf allow ptrace if debug mode is set		2024-03-13 16:11:10 +00:00
daemon	allow ptrace if debug mode is set	2024-03-13 16:11:10 +00:00
Makefile.linux	first commit	2024-03-10 11:35:30 +00:00
README.md	fix	2024-03-10 11:40:26 +00:00

README.md

Sandbox

Some basic sandboxing for i2pd using seccomp. I want to add Landlock when Linux 6.7 becomes available, but it has to wait because some important features are missing in lower kernel versions.

If you tested this please send a PR with how it worked.

Building

sudo apt install libseccomp-dev
make SANDBOX=yes

Tested

i2pd-2.52.0:

Debian 11.9 on aarch64
Debian 12.4 on x86-64