Should we support configuration/profiles?

[Zouuup]

Option 1: Landlock Config (Future-Oriented Standard)

Use Landlock Config as the backend config format for profiles. This is still in development and not stable, but it aligns well with future system-wide adoption like systemd integration.

Option 2: .landlockrc as Parameter Store (Minimalist CLI Approach)

Read .landlockrc in the working directory and "copy-paste" the CLI parameters from it at runtime.

# .landlockrc
--rox /usr/bin --ro /lib --rw /mydir touch /mydir

Option 3: Firejail-Style Profiles

Add support for a --profile flag that loads sandboxing rules from structured profile files, ideally reusing or adapting Firejail’s existing profile format.

[leapfog]

Option 2, in case it a) allows multiline files like

# .landlockrc
--rox /usr/bin
--ro /lib
--rw /mydir

and b) can optionally be extended on commandline