A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
C++ 3.34 k
1 个月前
Go library for installing a seccomp BPF system call filter.
Go 84
19 天前
🔒 download, verify & run torbrowser in a sandbox
Shell 18
1 年前
Merged to firejail; Find syscalls of executables for seccomp-bpf sandbox policies.
Shell 8
5 年前