rust-vmm/seccompiler

Provides easy-to-use Linux seccomp-bpf jailing.

Language: Rust - Size: 213 KB - Last synced: 21 days ago - Pushed: 3 months ago - Stars: 65 - Forks: 10

oxzi/syscallset-go

Go library to reduce privileges on Linux by syscall groups through seccomp-bpf.

Language: Go - Size: 57.6 KB - Last synced: about 1 month ago - Pushed: about 1 month ago - Stars: 2 - Forks: 0

giuseppe/easyseccomp

DSL language to write seccomp filters

Language: C - Size: 164 KB - Last synced: 2 months ago - Pushed: 2 months ago - Stars: 32 - Forks: 2

rapidlua/sandals

A lightweight process isolation tool, requiring absolutely no privileges to run

Language: C - Size: 301 KB - Last synced: 5 days ago - Pushed: over 4 years ago - Stars: 17 - Forks: 0

mildred/force-bind-seccomp

force-bind with seccomp-bpf notifications

Language: C - Size: 77.1 KB - Last synced: 6 months ago - Pushed: 6 months ago - Stars: 10 - Forks: 2

brynet/file

A portable version of OpenBSD's privsep/sandboxed file(1) utility

Language: C - Size: 1.06 MB - Last synced: 3 months ago - Pushed: about 1 year ago - Stars: 23 - Forks: 5

reverie-rs/reverie 📦

trace and intercept linux syscalls.

Language: Rust - Size: 1.94 MB - Last synced: about 1 year ago - Pushed: over 2 years ago - Stars: 14 - Forks: 5

codewizardshq/code-challenge 📦

Language: HTML - Size: 22.5 MB - Last synced: about 1 year ago - Pushed: over 1 year ago - Stars: 3 - Forks: 3

patrykstefanski/autoseccomp

Automated Approach for Generation of Seccomp System Call Filters

Language: Shell - Size: 17.6 KB - Last synced: about 1 year ago - Pushed: almost 3 years ago - Stars: 3 - Forks: 0