{"record":{"id":"e12942b6361f7fec","repo":"tinyhumansai/openhuman","slug":"landlock-is-only-supported-on-linux","errorCode":null,"errorMessage":"Landlock is only supported on Linux","messagePattern":"Landlock is only supported on Linux","errorType":"exception","errorClass":"io::Error","httpStatus":null,"severity":"error","filePath":"src/openhuman/security/landlock.rs","lineNumber":167,"sourceCode":"        \"Linux kernel LSM sandboxing (filesystem access control)\"\n    }\n}\n\n// Stub implementations for non-Linux or when feature is disabled\n#[cfg(not(all(feature = \"sandbox-landlock\", target_os = \"linux\")))]\npub struct LandlockSandbox;\n\n#[cfg(not(all(feature = \"sandbox-landlock\", target_os = \"linux\")))]\nimpl LandlockSandbox {\n    pub fn new() -> std::io::Result<Self> {\n        Err(std::io::Error::new(\n            std::io::ErrorKind::Unsupported,\n            \"Landlock is only supported on Linux with the sandbox-landlock feature\",\n        ))\n    }\n\n    pub fn with_workspace(_workspace_dir: Option<std::path::PathBuf>) -> std::io::Result<Self> {\n        Err(std::io::Error::new(\n            std::io::ErrorKind::Unsupported,\n            \"Landlock is only supported on Linux\",\n        ))\n    }\n\n    pub fn probe() -> std::io::Result<Self> {\n        Err(std::io::Error::new(\n            std::io::ErrorKind::Unsupported,\n            \"Landlock is only supported on Linux\",\n        ))\n    }\n}\n\n#[cfg(not(all(feature = \"sandbox-landlock\", target_os = \"linux\")))]\nimpl Sandbox for LandlockSandbox {\n    fn wrap_command(&self, _cmd: &mut std::process::Command) -> std::io::Result<()> {\n        Err(std::io::Error::new(\n            std::io::ErrorKind::Unsupported,","sourceCodeStart":149,"sourceCodeEnd":185,"githubUrl":"https://github.com/tinyhumansai/openhuman/blob/749120085864ce16e0f273c7b86fac7740b39c5b/src/openhuman/security/landlock.rs#L149-L185","documentation":"Stub-implementation error from LandlockSandbox::with_workspace in the cfg(not(all(sandbox-landlock, linux))) build: identical to the new() stub, it reports that the landlock backend was compiled out of this binary (feature off or non-Linux target) and therefore cannot be constructed with any workspace directory.","triggerScenarios":"Thrown at src/openhuman/security/landlock.rs:167 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Rebuild the core with the sandbox-landlock feature on Linux","Route sandboxing to a backend compiled into this build (docker, bubblewrap, firejail, or the platform jail)","Treat ErrorKind::Unsupported from sandbox constructors as 'backend absent', not retriable"],"exampleFix":null,"handlingStrategy":"fallback","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"749120085864ce16e0f273c7b86fac7740b39c5b","analyzedAt":"2026-08-17T21:21:45.363Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-14T05:17:10.506Z"}