landstrip runs a command in a Linux sandbox built from Landlock access control
rules and seccomp.
landstrip accepts the Anthropic Sandbox Runtime JSON subset used by the
macOS Seatbelt backend.
| Area | Seatbelt | Landstrip |
|---|---|---|
| Policy | path based rules | file based rules |
| Timing | dynamic subset of paths | file based static ruleset |
| TCP | localhost proxy ports | loopback proxy ports |
| Unix sockets | allowlist | allowlist via seccomp broker |
landstrip is licensed under LGPL-2.1-or-later.