1713 shaares
870 private links
870 private links
An linux sandboxing tool with pledge() syntax by Justine Tunney, author of "actually portable executable" and "redbean".
Alternative to apparmor (kernel module) or bubblewrap (cgroup/namespace).