Blogpost material: how to use a custom seccomp profile on a managed Kubernetes cluster

My 'Advanced container deep-dive workshop at DevConf Container Roadshow 2017.

nonetexec: prevent an exec(3)'ed command from opening new sockets

online judge sandbox

Grsecurity patched Linux, further modified to "containerise" processes automatically. RBAC system has been enhanced to support control of system call filters and namespaces. Currently supports network, IPC and UTS namespaces as well as seccomp filters. Currently x86-64 only. See also https://github.com/dderby/gradm

This repository contains code for the event of Clash held during the techfest Credenz 21-22 hosted by PICT IEEE Student Branch.

Sandbox server that judges untrusted code for OJ, based on QingdaoU Judger

Flask demo for presentation at Devops NG on Linux container hardening

A simple native go seccomp library

Tamed Python - Sandboxed execution of arbitrary Python code

Make LD_PRELOAD libraries work with Go applications (and other apps that make direct syscalls)

Gradm with added support to control system call filters and network, IPC and UTS namespaces. Currently supports x86-64 only. See also https://github.com/dderby/linux-4.4.6

FAUST CTF 2018 service "Diagon Alley"

Automate seccomp filter generation in your CI pipeline

Flask demo for presentation at Devops NG on Linux container hardening

Adding a seccomp filter to a source code

Restricts the port to which a process can bind

Mirror of https://codeberg.org/Douile/bwrap-scripts

Lavida judger.