Sandboxing with minimal effort
Inko adds a cross-platform sandbox API using Landlock, Seatbelt, pledge, and unveil.
Inko's author describes a standard-library sandbox API that lets an application restrict its own file and network access. Linux uses Landlock, macOS uses Seatbelt through sandbox_init, and OpenBSD uses pledge and unveil. FreeBSD Capsicum is intentionally a no-op because cap_enter prevents ordinary open calls and would require restructuring programs around openat. The static server shost is limited to reading its TLS and site directories and binding its TCP port. A Podman quadlet is shown as a separate container-level restriction.
26