A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
Sample application that shows how to create a Plugin Framework for a WPF application
⭕ zero ➡️ to 📦 container in ⌛ in 🐹 Golang
A .NET tool that uses AppDomain's to enable dynamic execution and escape detection.
A lightweight process isolation tool, requiring absolutely no privileges to run
It's a fancy process isolation tool that creates an isolated environment for your binary in under 10 minutes and lets you reset the execution state in under seconds. All this, with a couple of one-lin...
A light process isolation sandbox used for Competitive Programming contest
Projet INSA 5e année : Implémenter en C et assembleur ARMv7 les mécanismes fondamentaux d'un OS : gestion de la stack, context-switch, paging...
A Toy linux Container With Alpine Linux Mini Root File System
The GenCyber 10 Security First Principles are a set of fundamental best practices and guidelines for cybersecurity
EFFICIENT DOMAIN-LEVEL PROCESS ISOLATION ON AARCH64, Customized Linux Kernel
⚠️ OLD EXPERIMENT I used to learn Rust and linux namespaces ⚠️ A port of the excellent process isolation library NsJail to rust with experimental features to decrease the startup latency...
Minimal docker-like Linux container isolation
A low-level OCI compliant container runtime for modern Linux.