dev
released this
2026-11-07 23:34:51 +00:00
| 0 commits to main since this release
- Optional LAN access, strict by default:
--allow-subnet lets a lane reach chosen IPv4 subnets through the host's own route, and --allow-host-port opens chosen ports on the host itself, also reachable at localhost inside the lane; every other host address and port stays blocked
--deny-subnet, --deny-host-port, --strict and an interactive --access prompt change allowances later; status and --status --json report them- Terminal interface: LAN Access action, and per-assignment access that is reapplied when a lane is recreated
- Lanes are always exclusive; apps started with
--run or --shell run inside the lane as the invoking user
- Accept rules other tools insert into a lane's firewall table can no longer open its NIC to host traffic, and unsolicited traffic into a lane is dropped
- Breaking:
--sharing shared and --as-root are no longer accepted; release a shared lane and recreate it
Downloads