Post #1316044

I broke out an old utility from filed and made it into a dead simple sandboxing utility for shell scripts. https://git.sr.ht/~marcc/landdown The examples are quite self-explanatory: ``` #!/usr/bin/env landdown ro /bin ro /lib rwf /tmp/some-file.txt #!/bin/sh echo Edit > /tmp/some-file.txt ``` Or ``` #!/usr/bin/env landdown ro /bin ro /lib ro /etc/ssl rof /etc/resolv.conf connect 443 #!/bin/sh curl https://www.google.com ```