7 ms·
Lightweight Filesystem sandboxing with eBPF
- riyakhanna1983 7y agocode is now available: https://github.com/sandfs/LibSandFS https://github.com/sandfs/LibSandFS
- T3OU-736 7y agoThis damned cool, and neat! I do wonder if this can be combined with something like whitelisting based on some criteria. A _very_ unthought-through version would be checking a SHA-512 sum of a binary or some such. Either way, a neat tool in the toolbox.
- jedisct1 7y agoLinux users keep being jealous of OpenBSD's pledge(2) and unveil(2) system calls.