A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security. It utilizes Linux namespace subsystem, resource limits, and the seccomp-bpf syscall filters of the Linux kernel.
Features
- Isolate networking services (e.g. web, time, DNS), by isolating them from the rest of the OS
- Host computer security challenges (so-called CTFs)
- Contains invasive syscall-level OS fuzzers
- Offers three distinct operational modes
- Utilizes kafel seccomp-bpf configuration language for flexible syscall policy definitions
- Uses expressive, ProtoBuf-based configuration file
Project Samples
Categories
SecurityLicense
Apache License V2.0Follow nsjail
You Might Also Like
MongoDB Atlas runs apps anywhere
MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of nsjail!