Added
Introduced --rox flag to allow read-only with execution access to specified paths.
Introduced --rwx flag to allow read-write with execution access to specified paths.
New config field: ExecutablePaths to explicitly define which paths can be executed.
getExecutableRights() helper for fine-grained executable access using Landlock.
pathInSlice() utility to avoid duplicating rules for overlapping path categories.
Changed
CLI no longer uses global --exec flag. Execution permissions are now path-specific via --rox and --rwx.
Updated Landlock rule generation logic to cleanly separate executable paths from read-only and read-write ones.
Enhanced debug logging around rule registration.
Removed
--exec CLI flag deprecated and removed.