Sealbook / Open source / Security & hacking

google/nsjail

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

chrootlinuxlinux-namespacesprocess-isolationseccomp-bpf-policiessecurity

GitHub ↗Website ↗

License & maintenance

Apache-2.0 is a permissive license: free to use commercially with attribution.

Last code push 17 days ago.

Similar projects

	Repository	Stars	Language	License	Activity
1	imthenachoman/How-To-Secure-A-Linux-ServerAn evolving how-to guide for securing a Linux server.	★ 31.8k	—	CC-BY-SA-4.0	Active
2	keepassxreboot/keepassxcKeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.	★ 29.3k	C++	Other	Active
3	twpayne/chezmoiManage your dotfiles across multiple diverse machines, securely.	★ 22k	Go	MIT	Active
4	evilsocket/opensnitchOpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.	★ 14.2k	Python	GPL-3.0	Active
5	future-architect/vulsAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices	★ 12.3k	Go	GPL-3.0	Active
6	linkedin/school-of-sreAt LinkedIn, we are using this curriculum for onboarding our entry-level talents into the SRE role.	★ 8.2k	HTML	Other	Slowing
7	chaifeng/ufw-dockerTo fix the Docker and UFW security flaw without disabling iptables	★ 6.8k	Shell	GPL-3.0	Slowing
8	google/syzkallersyzkaller is an unsupervised coverage-guided kernel fuzzer	★ 6.4k	Go	Apache-2.0	Active