A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

The GenCyber 10 Security First Principles are a set of fundamental best practices and guidelines for cybersecurity

Process isolation for Linux using namespaces, resource limits and seccomp.

A light process isolation sandbox used for Competitive Programming contest

⚠️ OLD EXPERIMENT I used to learn Rust and linux namespaces ⚠️ A port of the excellent process isolation library NsJail to rust with experimental features to decrease the startup latency further

It's a fancy process isolation tool that creates an isolated environment for your binary in under 10 minutes and lets you reset the execution state in under seconds. All this, with a couple of one-liner commands from your trusty terminal.

Judgement and contest platform with processes isolation

Projet INSA 5e année : Implémenter en C et assembleur ARMv7 les mécanismes fondamentaux d'un OS : gestion de la stack, context-switch, paging...

EFFICIENT DOMAIN-LEVEL PROCESS ISOLATION ON AARCH64​, Customized Linux Kernel

A lightweight process isolation tool, requiring absolutely no privileges to run

A .NET tool that uses AppDomain's to enable dynamic execution and escape detection.

Sample application that shows how to create a Plugin Framework for a WPF application

⭕ zero ➡️ to 📦 container in ⌛ in 🐹 Golang