A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
翻译 - 轻量级进程隔离工具，利用Linux名称空间和seccomp-bpf syscall过滤器（借助kafel bpf语言）
C++2.98 k
19 天前