Low-level unprivileged sandboxing tool used by Flatpak and similar projects
C 4.33 k
8 个月前
StemJail: Dynamic Role Compartmentalization
Rust 43
9 年前
Simple desktop application sandboxing tool for GNU\Linux
C 16
1 个月前
A pure-Go implementation of fakeroot using Linux user namespaces.
Go 12
2 年前
Very experimental docker authorization plugin, disabling some trivial ways of gaining root via docker
Go 11
7 年前
Experiments with unshare
Python 5
7 年前
Kernel patches for non-init user namespace on FUSE filesystem
Shell 4
7 年前
Shell 3
8 个月前
Runs commands in Linux containers with configurable levels of isolation.
Go 2
8 年前
Nesting containers with podman
Shell 2
1 年前
C 2
5 年前
A nix shell running in a (thin) container
Go 1
2 年前
Lua 0
3 个月前