An eighth Linux namespace for agent sessions: 128-bit id, counters, budget enforcement; created via prctl, not clone
Dhi - Runtime Intelligence & Protection System. Sanskrit: Intellect | Perception. Kernel-space eBPF security monitoring for AI agents.
Small wrapper library for the Linux landlock API, including an example sandboxing utility
A solo continuation of the nostalgic StarCraft-inspired resource gathering simulator, built with C for some old-school fun.
An old scratchpad playing around with factorials and the Fibonacci sequence.
Simple desktop application sandboxing tool for GNU\Linux
A bare-metal 32-bit x86 hobby operating system featuring a cozy warm-beige light theme, preemptive scheduling, CR3 virtual memory isolation, stack canary safety, a custom Virtual File System, and interactive userland applications.
F440Scripts, files and tools related to sandboxing
CheriBSD with library sandboxing in the run-time linker for dissertation project
A MAC (Mandatory Access Control) module for FreeBSD that identifies executables based on their hash digest, and objects based on their st_dev/i_num. It supports transparent sandboxing at single process level.
dynamic analysis environment
Hustle-free command line tool to invoke any command in a VM
Revolutionary x86 Operating System Kernel with AI Supervision, Hot-Swappable Modules, and Actor-Based Shell
Low-level unprivileged sandboxing tool used by Flatpak and similar projects
A solo, sentimental StarCraft-inspired resource-gathering simulator, built during my school reading week in 2010.
Simple Sandboxer Tool (sst), based on Linux Landlock API. A single sst.c file, runs without fuss in an unprivileged environment.
Preventing unauthorized invocation of open system call in Linux by running processes in sand-boxed environments using capability based authorization implemented in user space.
Libpng fork for cheribuild, configuring an easy-to-sandbox minimal version and bundling zlib
🧙♂️ ImageMagick 7 fork for CheriBSD using sandboxed libpng
Add a description, image, and links to the sandboxing topic page so that developers can more easily learn about it.
To associate your repository with the sandboxing topic, visit your repo's landing page and select "manage topics."