feat(sandbox): add landlock for sandboxing

Author: QaidVoid

Cargo.lock

@@ -34,6 +34,7 @@ diesel_migrations = { version = "2.3.1", features = ["sqlite"] }
 documented = "0.9.2"
 fast-glob = "1.0.0"
 image = { version = "0.25.9", default-features = false, features = ["png"] }
+landlock = "0.4.4"
 libsqlite3-sys = { version = ">=0.30.1,<0.36.0", features = [ "bundled" ]}
 miette = { version = "7.6.0", features = ["fancy"] }
 nix = { version = "0.30.1", features = ["ioctl", "term", "user"] }

Cargo.toml

@@ -4,6 +4,7 @@ pub mod constants;
 pub mod database;
 pub mod error;
 pub mod package;
+pub mod sandbox;
 pub mod utils;
 
 pub type SoarResult<T> = std::result::Result<T, SoarError>;