Wireguard client that exposes itself as a socks5 proxy

A Virtual Machine Monitor for modern Cloud workloads. Features include CPU, memory and device hotplug, support for running Windows and Linux guests, device offload with vhost-user and a minimal com…

Linux namespaces and seccomp-bpf sandbox

Make your code extra-safe by voluntarily dropping privileges

bevy_mod_lockdown is a library to reduce the attack surface your application offers.

Extract files from any kind of container formats

Landlock examples

OpenBSD APIs ported to Linux userspace using SECCOMP BPF and Landlock LSM

Simple syscall sandboxing for Linux

Reference setup for Linux kernel development in VSCode

This is the stress-ng upstream project git repository. stress-ng will stress test a computer system in various selectable ways. It was designed to exercise various physical subsystems of a computer…

GitHub Actions for GitHub Pages 🚀 Deploy static files and publish your site easily. Static-Site-Generators-friendly.

Set of modifications for Deno to add subprocess sandboxing

Go filesystem isolation via Linux landlock sandbox

Rust utility library for nice command line prompts and similar things

Cross-platform embeddable sandboxing

A sandbox program for Wine in GNU/Linux that uses seccomp and Landlock

An integration between Wasmtime and Landlock

Creating and applying the Landlock ruleset.

Haskell bindings for the Linux Landlock API

OpenBSD unveil(2) like function in Linux using Landlock

Python interface to the Landlock Linux Security Module

Painless Linux sandboxing API

Sandboxing for GNU Make has never been easier

A Rust library for the Linux Landlock sandboxing feature

A high level language for SELinux policy

A Go library for the Linux Landlock sandboxing feature