A Ruby gem that confines external binaries with Linux Landlock sandboxes.
Source discussion: A heap overflow and SSO misconfiguration to compromise OpenAI internal repos
“we now run all external binaries, including magick via a landlock sandbox.”
sams99 · recommendation · production use
Direct HN comment
“I use ruby-landlock as well for image processing.”
kawsper · recommendation · first hand use
Direct HN comment