Go support for parsing, compiling, and installing Chromium OS Seccomp-BPF policy files.
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
Merged to firejail; Find syscalls of executables for seccomp-bpf sandbox policies.
Go library for installing a seccomp BPF system call filter.
Linux namespaces and seccomp-bpf sandbox
Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (BPF-LSM, AppArmor).
OCI hook to trace syscalls and generate a seccomp profile
Scaffolding for BPF application development with libbpf and BPF CO-RE
vArmor is a cloud native container sandbox system based on AppArmor/BPF/Seccomp. It also includes multiple built-in protection rules that are ready to use out of the box.
BPF Tools - packet analyst toolkit
Go bindings for creating BPF programs.
Minimal Solana BPF program template
Simple Linux seccomp rules without writing any code
37signals policies, terms, and legal. Share them; reuse them; contribute to them.
learn how to use BPF/eBPF
A Toolchain to make Build and Run eBPF programs easier