1720 shaares
871 private links
871 private links
An linux sandboxing tool with pledge() syntax by Justine Tunney, author of "actually portable executable" and "redbean".
Alternative to apparmor (kernel module) or bubblewrap (cgroup/namespace).