seccomp

There are 9 repositories under seccomp topic.

slimtoolkit / slim
Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
apparmor containers docker go golang hacktoberfest minify minify-images seccomp seccomp-profile security slim
Language:Go 18175
sandstorm-io / sandstorm
Sandstorm is a self-hostable web productivity suite. It's implemented as a security-hardened web app package manager.
capnproto decentralized sandstorm seccomp self-hosted self-hosting
Language:JavaScript 6636
Certified-Kubernetes-Security-Specialist
walidshaari / Certified-Kubernetes-Security-Specialist
Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.
kubernetes-security kubernetes cks ckss kernel-hardening exam-objectives os-footprint security seccomp apparmor falco kube-hunter kube-bench trivy pod certification policy mitre-attack pod-security-policy open-policy-agent
Language:AGS Script 1918
david942j / seccomp-tools
Provide powerful tools for seccomp analysis
ctf sandbox seccomp seccomp-filter seccomp-tools tools
Language:Ruby 922
genuinetools / contained.af
A stupid game for learning about containers, capabilities, and syscalls.
apparmor containers docker game linux opencontainers seccomp security syscalls
Language:JavaScript 881
seccomp / libseccomp
The main libseccomp repository
bpf seccomp libseccomp
Language:C 771
ViktorUJ / cks
Open-source Platform for learning kubernetes and aws eks and preparation for for Certified Kubernetes exams (CKA ,CKS , CKAD)
aws cka ckad cks k8s terraform terragrunt apparmor falco kubernetes-security seccomp eks gvisor kubernetes kubernetes-cluster opa kubeadm certified-kubernetes-security-specialist kubernetes-learning learn-kubernetes
Language:HCL 667
kubernetes-sigs / security-profiles-operator
The Kubernetes Security Profiles Operator
kubernetes kubernetes-operator seccomp k8s-sig-node seccomp-operator seccomp-profiles security-profiles selinux apparmor
Language:C 647
seccomp / libseccomp-golang
The libseccomp golang bindings repository
bpf libseccomp seccomp
Language:Go 251
moabukar / CKS-Exercises-Certified-Kubernetes-Security-Specialist
A set of curated exercises to help you prepare for the CKS exam
kubernetes cks security containers falco security-tools apparmor trivy anchore opa seccomp audit-log networkpolicies secrets-management sysdig kube-bench gvisor static-analysis containerd
Language:Shell 214
avilum / secimport
eBPF Python runtime sandbox with seccomp (Blocks RCE).
3rd-party bpftrace dtrace ebpf import linux profiling python rce sandbox seccomp security security-tools tracing
Language:Python 158
xfernando / go2seccomp
Generate seccomp profiles from go binaries
go containers seccomp security
Language:Go 135
proot-me / proot-rs
Rust implementation of PRoot, a ptrace-based sandbox
rust sandbox ptrace seccomp non-root linux bindings bind mount container userspace rootless-containers binfmt proot proot-rs hacktoberfest
Language:Rust 118
grantseltzer / karn
Simplifying Seccomp enforcement in containerized or non-containerized apps
seccomp seccomp-filter karn security security-tools security-hardening containers container-security
Language:Go 110
antitree / syscall2seccomp
Build custom Docker seccomp profiles for containers by finding syscalls it uses.
docker seccomp identify-syscalls docker-container
Language:Python 87
elastic / go-seccomp-bpf
Go library for installing a seccomp BPF system call filter.
golang seccomp seccomp-bpf-policies
Language:Go 73
rust-vmm / seccompiler
Provides easy-to-use Linux seccomp-bpf jailing.
seccomp-bpf seccomp
Language:Rust 61
orivej / fptrace
Record process launches and files read and written by each process
ptrace strace dependency-graph seccomp
Language:Go 56
bnbdr / ida-bpf-processor
BPF Processor for IDA Python
idapython-plugin bpf processor ida seccomp disasm disassembler
Language:Python 48
msantos / alcove
Control plane for system processes
system-programming exec fork linux-namespaces signal capsicum pledge seccomp prctl procctl
Language:C 47
alegrey91 / harpoon
🔍 Trace syscalls of user-space defined functions, using eBPF
ebpf ebpf-programs golang seccomp security-audit security-tools syscalls system-calls
Language:C 45
blacktop / seccomp-gen
Docker Secure Computing Profile Generator
docker seccomp seccomp-profile generator golang
Language:Go 45
antitree / keyctl-unmask
Going Florida on container keyring masks. A tool to demonstrate the ineffectivity containers have on isolating Linux Kernel keyrings.
containers security-tools kubernetes breakout keyctl syscalls docker seccomp namespacing
Language:Go 41
kinvolk / seccompagent
agent for handling seccomp descriptors for container runtimes
kinvolk seccomp containers
Language:Go 41
mint
mintoolkit / mint
minT(oolkit): Awesome, secure and production ready containers just the way you need them! Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
apparmor cont containerd containers docker docker-slim go golang minify minify-images podman seccomp seccomp-profile slim minimal-container-images slimtoolkit
Language:Go 38
msantos / prx
an Erlang library for interacting with Unix processes
exec fork linux-namespaces signal supervisor system-programming capsicum pledge seccomp prctl procctl
Language:Erlang 35
giuliocomi / csplogger
A CSP endpoint to aggregate, correlate and analyze report-uri violations across your infrastructure
csp infrastructure report-uri dashboard flask logging docker security-tools security-audit seccomp apparmor hardened-image
Language:Python 33
giuseppe / easyseccomp
DSL language to write seccomp filters
containers seccomp seccomp-bpf seccomp-filter security
Language:C 33
SamratV / Online-Judge
Online Judge for testing programming ability in C, C++, Java and Python.
online-judge seccomp java jsp-servlet ace-editor javascript jquery
Language:JavaScript 30
libseccomp-rs / libseccomp-rs
Rust Language Bindings for the libseccomp Library
seccomp libseccomp containers linux-kernel api-bindings rust
Language:Rust 28
utoni / potd
A high scalable low to medium interactive SSH/TCP honeypot using Linux Namespaces, capabilities, seccomp, cgroups designed for OpenWrt and IoT devices.
honeypot c openwrt sandbox ssh-honeypot seccomp capabilities cgroups
Language:C 28
healeycodes / untrusted-python
📦 Run untrusted python code on the server
rlimit seccomp untrusted-code pyseccomp setrlimit sandbox
Language:TypeScript 26
kpcyrd / syscallz-rs
Simple seccomp library for rust
rust seccomp sandbox
Language:Rust 24
pjbgf / zaz
A command line tool to automatically generate seccomp profiles.
seccomp security security-tools seccomp-tools container-security seccomp-json
Language:Go 24
brynet / file
A portable version of OpenBSD's privsep/sandboxed file(1) utility
c openbsd seccomp-filter sandbox utility privsep seccomp seccomp-bpf file security portable linux privdrop pledge
Language:C 23
msantos / xmppipe
stdio over XMPP
xmpp chatbot capsicum pledge seccomp
Language:C 23

seccomp

slimtoolkit / slim

sandstorm-io / sandstorm

walidshaari / Certified-Kubernetes-Security-Specialist

david942j / seccomp-tools

genuinetools / contained.af

seccomp / libseccomp

ViktorUJ / cks

kubernetes-sigs / security-profiles-operator

seccomp / libseccomp-golang

moabukar / CKS-Exercises-Certified-Kubernetes-Security-Specialist

avilum / secimport

xfernando / go2seccomp

proot-me / proot-rs

grantseltzer / karn

antitree / syscall2seccomp

elastic / go-seccomp-bpf

rust-vmm / seccompiler

orivej / fptrace

bnbdr / ida-bpf-processor

msantos / alcove

alegrey91 / harpoon

blacktop / seccomp-gen

antitree / keyctl-unmask

kinvolk / seccompagent

mintoolkit / mint

msantos / prx

giuliocomi / csplogger

giuseppe / easyseccomp

SamratV / Online-Judge

libseccomp-rs / libseccomp-rs

utoni / potd

healeycodes / untrusted-python

kpcyrd / syscallz-rs

pjbgf / zaz

brynet / file

msantos / xmppipe