GitHub topics: sandboxing
landlock-lsm/rust-landlock
A Rust library for the Linux Landlock sandboxing feature
Language: Rust - Size: 232 KB - Last synced at: about 1 hour ago - Pushed at: about 2 hours ago - Stars: 122 - Forks: 13

microsandbox/microsandbox
Self-hosted Solution for Running AI-Generated Code in Secure Sandboxes
Language: Rust - Size: 5.63 MB - Last synced at: about 15 hours ago - Pushed at: 1 day ago - Stars: 51 - Forks: 7

dariofad/dariofad.github.io
Postdoctoral researcher, Emacs enthusiast, Japanese language learner
Language: SCSS - Size: 14.1 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 1 - Forks: 0

trailofbits/build-wrap
Help protect against malicious build scripts
Language: Rust - Size: 175 KB - Last synced at: 1 day ago - Pushed at: 2 days ago - Stars: 13 - Forks: 3

bytecodealliance/cap-std
Capability-oriented version of the Rust standard library
Language: Rust - Size: 2.44 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 683 - Forks: 37

flatpak/xdg-desktop-portal
Desktop integration portal
Language: C - Size: 5.56 MB - Last synced at: 3 days ago - Pushed at: 27 days ago - Stars: 663 - Forks: 213

Lind-Project/lind-wasm
Lind sandbox monorepo
Language: C - Size: 172 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 4 - Forks: 4

zyedidia/lfi
LFI: Practical, Efficient, and Secure Software-based Sandboxing
Language: C - Size: 2.01 MB - Last synced at: 4 days ago - Pushed at: 5 days ago - Stars: 67 - Forks: 8

hartwork/sandwine
:wine_glass: Command-line tool to run Windows apps with Wine and bwrap/bubblewrap isolation on Linux
Language: Python - Size: 205 KB - Last synced at: 4 days ago - Pushed at: 5 days ago - Stars: 103 - Forks: 9

adolfintel/TDF
Linux Gaming without Steam. Install, configure, run and distribute games inside sandboxed Wine environments
Language: Shell - Size: 6.96 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 17 - Forks: 1

helpme970/bubblejail
bubblewrap overlay for an easier usage
Language: Shell - Size: 32.2 KB - Last synced at: 5 days ago - Pushed at: 6 days ago - Stars: 0 - Forks: 0

google/sandboxed-api
Generate sandboxes for C/C++ libraries automatically
Language: C++ - Size: 131 MB - Last synced at: 4 days ago - Pushed at: 7 days ago - Stars: 1,688 - Forks: 193

MaulingMonkey/firehazard
Unopinionated low level API bindings focused on soundness, safety, and stronger types over raw FFI.
Language: Rust - Size: 1.17 MB - Last synced at: 6 days ago - Pushed at: 7 days ago - Stars: 9 - Forks: 0

souk4711/hakoniwa
Process isolation for Linux using namespaces, resource limits, landlock and seccomp.
Language: Rust - Size: 4.77 MB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 27 - Forks: 5

google/minijail
sandboxing and containment tool used in ChromeOS and Android
Language: C - Size: 3.15 MB - Last synced at: 4 days ago - Pushed at: 8 days ago - Stars: 305 - Forks: 29

FortressOS/fortify
Linux desktop application sandbox. This is a read-only mirror. Please submit patches via email.
Language: Go - Size: 1.19 MB - Last synced at: 8 days ago - Pushed at: 8 days ago - Stars: 2 - Forks: 0

fgaz/nix-bubblewrap
Nix - bubblewrap integration (mirror)
Language: Tcl - Size: 31.3 KB - Last synced at: 11 days ago - Pushed at: 11 days ago - Stars: 18 - Forks: 2

landlock-lsm/go-landlock
A Go library for the Linux Landlock sandboxing feature
Language: Go - Size: 178 KB - Last synced at: 10 days ago - Pushed at: about 2 months ago - Stars: 184 - Forks: 11

loft-sh/loft
Namespace & Virtual Cluster Manager for Kubernetes - Lightweight Virtual Clusters, Self-Service Provisioning for Engineers and 70% Cost Savings with Sleep Mode
Language: Go - Size: 137 MB - Last synced at: 9 days ago - Pushed at: 12 days ago - Stars: 761 - Forks: 68

hacrvlq/skeld
a tui tool for opening projects in a restricted sandbox to prevent supply chain attacks such as typosquatting
Language: Rust - Size: 233 KB - Last synced at: 13 days ago - Pushed at: 13 days ago - Stars: 3 - Forks: 0

libriscv/drogon_tinykvm
Sandboxed request handling in Drogon using TinyKVM
Language: C++ - Size: 443 KB - Last synced at: 14 days ago - Pushed at: 14 days ago - Stars: 0 - Forks: 0

io7m-graveyard/jcage 📦
Run-time configurable JVM sandboxing
Language: Java - Size: 277 KB - Last synced at: 14 days ago - Pushed at: almost 7 years ago - Stars: 3 - Forks: 0

kpcyrd/boxxy-rs
Linkable sandbox explorer
Language: Rust - Size: 259 KB - Last synced at: 11 days ago - Pushed at: 3 months ago - Stars: 79 - Forks: 9

intgr/ego
Alter Ego: run Linux desktop applications under a different local user
Language: Rust - Size: 229 KB - Last synced at: 11 days ago - Pushed at: 12 days ago - Stars: 150 - Forks: 1

HowProgrammingWorks/NodejsStarterKit
Starter Kit for Node.js 16 or later, minimum dependencies 🚀
Language: JavaScript - Size: 536 KB - Last synced at: 19 days ago - Pushed at: 10 months ago - Stars: 459 - Forks: 101

DarkCaster/Sandboxer
Simple desktop application sandboxing tool for GNU\Linux
Language: C - Size: 1.78 MB - Last synced at: 9 days ago - Pushed at: 20 days ago - Stars: 16 - Forks: 0

git-bruh/kiss-ng
Next generation of the KISS Package manager
Language: Zig - Size: 18.6 KB - Last synced at: 20 days ago - Pushed at: 20 days ago - Stars: 1 - Forks: 0

bazelbuild/sandboxfs
A virtual file system for sandboxing
Language: Rust - Size: 854 KB - Last synced at: 12 days ago - Pushed at: about 1 month ago - Stars: 378 - Forks: 40

vortexdl/aero
A safe, developer-friendly, declarative interception web proxy with many features with a powerful web sandboxing library to bypass and overcome browser limitations in a secure sandbox that respects security features. This is a monorepo.
Language: TypeScript - Size: 1.52 MB - Last synced at: 5 days ago - Pushed at: 4 months ago - Stars: 56 - Forks: 67

git-bruh/dotfiles
Dots
Language: Lua - Size: 3.97 MB - Last synced at: 24 days ago - Pushed at: 24 days ago - Stars: 0 - Forks: 0

maximecb/uvm
Fun, portable, minimalistic virtual machine.
Language: Rust - Size: 1.85 MB - Last synced at: 14 days ago - Pushed at: 7 months ago - Stars: 554 - Forks: 19

NikolayIT/OpenJudgeSystem
An open source system for online algorithm competitions for Windows, written in ASP.NET MVC
Language: JavaScript - Size: 50.3 MB - Last synced at: 19 days ago - Pushed at: almost 2 years ago - Stars: 517 - Forks: 96

bengabp/sandbox
Run and manage playwright in a sandbox
Language: Python - Size: 105 KB - Last synced at: 28 days ago - Pushed at: 28 days ago - Stars: 0 - Forks: 0

metarhia/Example
Metarhia application example for Node.js 🟢
Language: JavaScript - Size: 4.26 MB - Last synced at: 11 days ago - Pushed at: about 1 month ago - Stars: 205 - Forks: 75

isobiscuit/isobiscuit
The biscuit virtualization tool
Language: Python - Size: 460 KB - Last synced at: 4 days ago - Pushed at: about 1 month ago - Stars: 11 - Forks: 0

PLSysSec/rlbox
RLBox sandboxing framework
Language: C++ - Size: 7.38 MB - Last synced at: 4 days ago - Pushed at: about 1 month ago - Stars: 296 - Forks: 21

ObiWahn/ai-bwrap
script collection to run ai tools with bwrap
Language: Shell - Size: 1.95 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 0 - Forks: 0

Dyalog/TryAPL
This is the source code for TryAPL.org
Language: JavaScript - Size: 5.71 MB - Last synced at: 17 days ago - Pushed at: about 1 month ago - Stars: 24 - Forks: 7

ossillate-inc/packj
Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain
Language: Python - Size: 1.31 MB - Last synced at: about 1 month ago - Pushed at: about 1 year ago - Stars: 662 - Forks: 35

SUPERCILEX/forkfs
ForkFS allows you to sandbox a process's changes to your file system.
Language: Rust - Size: 179 KB - Last synced at: 19 days ago - Pushed at: about 1 month ago - Stars: 77 - Forks: 3

khaleesicodes/Matilda
Lightweight run-time level sandboxing for java
Language: Java - Size: 563 KB - Last synced at: about 1 month ago - Pushed at: 2 months ago - Stars: 11 - Forks: 0

darrenldl/sandboxing
Scripts, files and tools related to sandboxing
Language: C - Size: 662 KB - Last synced at: 18 days ago - Pushed at: over 3 years ago - Stars: 31 - Forks: 0

istoreos/istoreos-kvm
iStoreOS running on libvirt qemu-kvm
Language: Shell - Size: 8.79 KB - Last synced at: 22 days ago - Pushed at: 4 months ago - Stars: 9 - Forks: 3

metarhia/sandboxed-fs
Sandbox wrapper for Node.js File System API 💾
Language: JavaScript - Size: 173 KB - Last synced at: 16 days ago - Pushed at: 9 months ago - Stars: 50 - Forks: 3

Browser-Ports/StealthBlock
A WIP, soon to be, undetectable Adblocker that is backwards compatible with other filter lists, and will have many implementations
Language: TypeScript - Size: 74.2 KB - Last synced at: about 2 months ago - Pushed at: 3 months ago - Stars: 0 - Forks: 0

val-town/deno-http-worker
Securely spawn Deno workers from Node.js
Language: TypeScript - Size: 298 KB - Last synced at: 1 day ago - Pushed at: 3 months ago - Stars: 19 - Forks: 3

metarhia/metavm
Script loader with isolated sandboxes for node.js 📦
Language: JavaScript - Size: 267 KB - Last synced at: 16 days ago - Pushed at: 4 months ago - Stars: 44 - Forks: 7

Trains77/bwrap-mc-java
Tries to sandbox Minecraft in a per instance way in PrismLauncher
Language: Shell - Size: 208 KB - Last synced at: 4 months ago - Pushed at: 4 months ago - Stars: 0 - Forks: 0

crabdancing/nixpak-flatpak-wrapper
Hacks helping with semi-almost-usable declarative NixOS sandboxing
Language: Rust - Size: 61.5 KB - Last synced at: about 9 hours ago - Pushed at: 8 months ago - Stars: 11 - Forks: 1

pacwrap/pacwrap
A package manager which facilitates Arch-based bubblewrap containers.
Language: Rust - Size: 1.17 MB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 4 - Forks: 0

devspace-cloud/devspace-cloud
DevSpace Cloud ⚡ Turn Kubernetes into a Powerful Developer Platform (new on-premise edition)
Language: Open Policy Agent - Size: 40 MB - Last synced at: 24 days ago - Pushed at: over 2 years ago - Stars: 109 - Forks: 15

tobykurien/WebApps
DEPRECATED ⛔️ Android app to provide sandboxed (private) browsing of webapps
Language: Xtend - Size: 13.3 MB - Last synced at: 5 months ago - Pushed at: 5 months ago - Stars: 236 - Forks: 30

gnoack/landlockjail
A command line tool for playing with Linux 5.13's Landlock feature
Language: C - Size: 3.91 KB - Last synced at: 17 days ago - Pushed at: about 4 years ago - Stars: 8 - Forks: 3

custodia-cenv/cenvx-core
CustodiaJS provides a secure and isolated execution environment for V8 Javascript instances using containerization and sandboxing. Each instance runs in its own container and process, with no access to the host filesystem or network, ensuring high security and flexibility for parallel script execution.
Language: Go - Size: 61.4 MB - Last synced at: 3 months ago - Pushed at: 5 months ago - Stars: 2 - Forks: 1

alegrey91/Gontainer
🫙 Rudimentary namespace-based container for Linux
Language: Go - Size: 58.6 KB - Last synced at: 4 days ago - Pushed at: over 4 years ago - Stars: 76 - Forks: 8

lablup/backend.ai-jail
A programmable security sandbox for Backend.AI kernels
Language: Rust - Size: 118 KB - Last synced at: 4 days ago - Pushed at: 11 months ago - Stars: 8 - Forks: 2

Hellorge/void
Random things I write.
Language: HTML - Size: 1.36 MB - Last synced at: about 2 months ago - Pushed at: 7 months ago - Stars: 0 - Forks: 0

ConnorShride/box-ps
Powershell sandboxing utility
Language: PowerShell - Size: 268 KB - Last synced at: 7 months ago - Pushed at: 7 months ago - Stars: 17 - Forks: 3

ApelegHQ/lot-examples
Examples using lot -- https://github.com/ApelegHQ/lot
Language: JavaScript - Size: 616 KB - Last synced at: 8 days ago - Pushed at: 7 months ago - Stars: 0 - Forks: 0

landlock-lsm/tuto-lighttpd 📦
:warning: Superseded by workshop-imagemagick
Language: C - Size: 5.78 MB - Last synced at: 9 days ago - Pushed at: over 1 year ago - Stars: 4 - Forks: 1

akirak/emacs-playground
Manage sandboxes for alternative Emacs configurations
Language: Emacs Lisp - Size: 83 KB - Last synced at: 9 days ago - Pushed at: over 4 years ago - Stars: 54 - Forks: 5

NaheedRayan/code-execution-engine
An API which executes codes in a sandbox environment 🙀🤯.
Language: JavaScript - Size: 2 MB - Last synced at: 8 months ago - Pushed at: 8 months ago - Stars: 6 - Forks: 2

HowProgrammingWorks/Sandboxes
VM Sandboxes
Language: JavaScript - Size: 13.7 KB - Last synced at: 23 days ago - Pushed at: over 1 year ago - Stars: 17 - Forks: 13

mawalu/qsandbox
Shell sandboxing using QEMU and virtiofsd. Just enter qsandbox run to open your current working dir in a temporary QEMU vm.
Language: Shell - Size: 10.7 KB - Last synced at: 13 days ago - Pushed at: over 3 years ago - Stars: 5 - Forks: 0

AbhishekBhosale46/OnlineJudge-Judger
This project is a judger system designed to compile, run and judge C++, Java, and Python programs inside sandboxed environment.
Language: Python - Size: 12.7 KB - Last synced at: 10 months ago - Pushed at: 10 months ago - Stars: 1 - Forks: 0

mk-fg/apparmor-profiles
My local AppArmor profiles for apps that can use those
Language: Python - Size: 227 KB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 66 - Forks: 17

senicko/code-runner
Command line app that executes the submitted code
Language: Go - Size: 33.2 KB - Last synced at: 10 months ago - Pushed at: almost 3 years ago - Stars: 2 - Forks: 0

metarhia/metawatch
Nested directories watch for node.js 🕵️
Language: JavaScript - Size: 227 KB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 15 - Forks: 4

anatom3000/Gravit 📦
A gravity sandbox. Please enjoy this :)
Language: Python - Size: 221 KB - Last synced at: 11 months ago - Pushed at: about 3 years ago - Stars: 7 - Forks: 3

ElizabethHudnott/one-way-sandbox
Lets a parent frame control a sandboxed iframe in a jQuery-like way without letting the iframe access the parent.
Language: JavaScript - Size: 56.6 KB - Last synced at: 11 months ago - Pushed at: 11 months ago - Stars: 3 - Forks: 0

cooljeanius/OSX-Sandbox--Seatbelt--Profiles Fork of s7ephen/OSX-Sandbox--Seatbelt--Profiles
A repository for configuration profiles for OSX's Seatbelt Application Sandbox. Forked to prettify the readme, that's all
Language: Scheme - Size: 13.7 KB - Last synced at: 12 months ago - Pushed at: over 1 year ago - Stars: 3 - Forks: 0

hughrawlinson/user-script-sandbox-example 📦
Failed attempt to demo code sandboxing
Language: JavaScript - Size: 0 Bytes - Last synced at: about 1 year ago - Pushed at: over 3 years ago - Stars: 0 - Forks: 0

lugnitdgp/OnlineJ
Online Judge for holding coding competitions
Language: Ruby - Size: 1.66 MB - Last synced at: about 1 year ago - Pushed at: over 6 years ago - Stars: 6 - Forks: 16

komachi/apparmor-even-more-profiles
Collection of AppArmor profiles for hardering Debian Stable (currently buster).
Language: Roff - Size: 588 KB - Last synced at: 8 days ago - Pushed at: over 2 years ago - Stars: 8 - Forks: 0

ghoomfrog/kid 📦
a minimalist, sandboxed scripting language
Size: 133 KB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 0 - Forks: 0

varqox/masters_thesis 📦
Sandbox for multi-process applications for unprivileged users on Linux
Language: TeX - Size: 11.4 MB - Last synced at: about 1 year ago - Pushed at: over 1 year ago - Stars: 2 - Forks: 0

ChimeHQ/ProcessService 📦
Host an executable within an XPC service
Language: Swift - Size: 721 KB - Last synced at: 3 days ago - Pushed at: over 1 year ago - Stars: 39 - Forks: 1

disconnect3d/reverse-me-python
"Reverse-me" aka "I hate portals" challenge made for Python Challenges 2018 competition that was held at PyCon PL 2018.
Language: Python - Size: 15.6 KB - Last synced at: 19 days ago - Pushed at: over 6 years ago - Stars: 13 - Forks: 2

valpackett/rusty-sandbox 📦
A sandboxing library for Rust | now on https://codeberg.org/valpackett/rusty-sandbox
Size: 0 Bytes - Last synced at: 11 months ago - Pushed at: over 2 years ago - Stars: 59 - Forks: 2

pennant-notebook/pennant-engine
This repository contains the remote code execution engine for the pennant-notebook project.
Language: JavaScript - Size: 378 KB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 3 - Forks: 0

festusmaithyakcau/alx-system_engineering-devops
Using higher level languages ie Python to build complex projects
Language: Shell - Size: 646 KB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 2 - Forks: 0

akolishchak/geswall
GeSWall, Intrusion Prevention System
Language: C++ - Size: 773 KB - Last synced at: over 1 year ago - Pushed at: over 6 years ago - Stars: 21 - Forks: 13

Douile/bwrap-scripts
Mirror of https://codeberg.org/Douile/bwrap-scripts
Language: Shell - Size: 15.6 KB - Last synced at: 26 days ago - Pushed at: over 1 year ago - Stars: 0 - Forks: 0

azerum/php-safe
PHP and Composer sandbox for macOS
Language: Shell - Size: 12.7 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 0 - Forks: 0

l0kod/tuto-lighttpd Fork of landlock-lsm/tuto-lighttpd
Landlock tutorial to patch lighttpd
Language: C - Size: 5.77 MB - Last synced at: over 1 year ago - Pushed at: about 2 years ago - Stars: 0 - Forks: 0

zedxpace/SandboxDetection-with-python
This repo explains the process of sandboxing with python as It is a computer security term reffering to when a program in set aside from other progams in a seprate environment so that if errors or security issues occur ,those issues will not spread to other areas on the computer .
Language: Python - Size: 12.7 KB - Last synced at: over 1 year ago - Pushed at: about 2 years ago - Stars: 4 - Forks: 2

pitukg/cheribsd-rtld-sandbox Fork of CTSRD-CHERI/cheribsd
CheriBSD with library sandboxing in the run-time linker for dissertation project
Size: 1.64 GB - Last synced at: over 1 year ago - Pushed at: almost 3 years ago - Stars: 0 - Forks: 0

pitukg/libpng Fork of CTSRD-CHERI/libpng
Libpng fork for cheribuild, configuring an easy-to-sandbox minimal version and bundling zlib
Size: 38.1 MB - Last synced at: over 1 year ago - Pushed at: about 3 years ago - Stars: 0 - Forks: 1

pitukg/ImageMagick Fork of ImageMagick/ImageMagick
🧙♂️ ImageMagick 7 fork for CheriBSD using sandboxed libpng
Size: 115 MB - Last synced at: over 1 year ago - Pushed at: about 3 years ago - Stars: 0 - Forks: 1

ansjin/terminus
Performance Modeling and Sandboxing for Microservices Applications
Language: Jupyter Notebook - Size: 8.9 MB - Last synced at: about 1 year ago - Pushed at: over 6 years ago - Stars: 7 - Forks: 2

NuxiNL/scuba
Kubernetes Container Runtime Interface daemon for running CloudABI jobs
Language: C++ - Size: 86.9 KB - Last synced at: about 1 year ago - Pushed at: over 6 years ago - Stars: 17 - Forks: 0

ndxbn/sand-box 📦
sand box
Language: PHP - Size: 8.79 KB - Last synced at: over 1 year ago - Pushed at: about 7 years ago - Stars: 0 - Forks: 0

erdnaxe/sandboxdb.org
SandboxDB.org collects sandboxing options from various GNU/Linux distributions.
Language: Sass - Size: 632 KB - Last synced at: over 1 year ago - Pushed at: almost 3 years ago - Stars: 2 - Forks: 0

litneet64/containerized-bomb-disposal
Set of dockerfiles meant for throw-away instances that achieve a singular purpose: to "safely" interact (run, play, unzip, etc) with programs or files without the need of a full VM to avoid compromise of the host machine. Think of it as a bomb disposal device for files you don't trust that much but still need to run, unzip or play.
Language: Dockerfile - Size: 41 KB - Last synced at: over 1 year ago - Pushed at: over 4 years ago - Stars: 0 - Forks: 0

mrozycki/undergground
Grader for solutions to algorithmic problems
Language: C++ - Size: 26.5 MB - Last synced at: over 1 year ago - Pushed at: almost 2 years ago - Stars: 0 - Forks: 0

nordlow/containerize
Containerization and, in turn, caching of a process call in Python.
Language: Python - Size: 116 KB - Last synced at: over 1 year ago - Pushed at: almost 8 years ago - Stars: 0 - Forks: 0

luffah/u_chroot_start
Container system for the hoboes and neet
Language: Shell - Size: 1.95 KB - Last synced at: 19 days ago - Pushed at: almost 4 years ago - Stars: 1 - Forks: 0

atopia/sandcrust
Sandboxing C in Rust
Language: Rust - Size: 142 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 15 - Forks: 3

julanu/gitops-kustomize-infrastructure
GitOps hands-on practice with Flux
Size: 47.9 KB - Last synced at: almost 2 years ago - Pushed at: almost 2 years ago - Stars: 0 - Forks: 0

darrylyeo/fluorine-notebook
Reactive JavaScript notebook inspired by ObservableHQ.
Language: JavaScript - Size: 10.7 KB - Last synced at: 4 days ago - Pushed at: about 5 years ago - Stars: 4 - Forks: 1
