The short version
A Ruby gem that confines external binaries with Linux Landlock sandboxes.
From the HackerLinks archive
ruby-landlock
A Ruby gem that confines external binaries with Linux Landlock sandboxes.
At a glance:
First seen:2026-09-19
Last seen:2026-09-19
Times seen:1
Website:github.com
Why it caught our attention
Two production users recommended it for defense-in-depth around native image-processing tools.
Where it surfaced on Hacker News
2026-09-19
“we now run all external binaries, including magick via a landlock sandbox.”
sams99 · recommendation · production use
Direct HN comment
“I use ruby-landlock as well for image processing.”
kawsper · recommendation · first hand use
Direct HN comment
A heap overflow and SSO misconfiguration to compromise OpenAI internal repos