1688 shaares
869 private links
869 private links
An linux sandboxing tool with pledge() syntax by Justine Tunney, author of "actually portable executable" and "redbean".
Alternative to apparmor (kernel module) or bubblewrap (cgroup/namespace).