SELinuxProject / selint
Static code analysis of refpolicy style SELinux policy
☆42Updated 2 weeks ago
Alternatives and similar repositories for selint:
Users that are interested in selint are comparing it to the libraries listed below
- IPE is a Linux Security Module (LSM), which allows for a configurable policy to enforce integrity requirements on the whole system. IPE b…☆60Updated 3 weeks ago
- A high level language for SELinux policy☆57Updated this week
- LKRG bypass methods☆70Updated 5 years ago
- A tool to help you understand TPM commands and responses.☆37Updated 2 months ago
- Checks for tpm vulnerabilities☆36Updated last year
- Example program using eBPF to log data being based in using shell pipes☆41Updated 4 years ago
- Linux kernel - See Landlock issues☆36Updated 2 months ago
- Automated dynamic security analysis by emulation of IoT firmware images in CI-pipelines.☆11Updated 3 years ago
- Tutorials from TPM.dev members☆99Updated 7 months ago
- ☆25Updated last year
- ☆85Updated 7 months ago
- suidsnoop is a tool based on eBPF LSM programs that logs whenever a suid binary is executed and implements custom allow/deny lists.☆15Updated 3 years ago
- Build custom Docker seccomp profiles for containers by finding syscalls it uses.☆89Updated 4 years ago
- Converged Security Suite for Intel & AMD platform security features☆60Updated last week
- ☆15Updated 4 years ago
- Automate generation of syzkaller's grammar☆14Updated 2 years ago
- (Linux Kernel) Stack Monitoring Tool☆43Updated 3 years ago
- Armory Drive - USB encrypted drive with mobile unlock over BLE☆53Updated last week
- A collection of bypasses and exploits for eBPF-based cloud security.☆21Updated last year
- Alcatraz project for Black Hat USA 2021☆77Updated 3 years ago
- egrets monitors egress☆46Updated 4 years ago
- wolfSSL Intrusion Detection and Prevention System (IDPS)☆34Updated 3 weeks ago
- ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.☆117Updated last year
- CITL's static analysis engine for native code artifacts☆20Updated 3 years ago
- Default query sets for Joern☆26Updated 3 years ago
- A place to systematically store software bill of materials (SBOM) documents.☆44Updated last year
- unofficial grsecurity gpl release☆22Updated 6 years ago
- VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordin…☆61Updated last week
- Device Identifier Composition Engine☆11Updated 2 years ago
- Control-Flow Integrity implementation for the Linux Kernel 3.19☆20Updated 5 years ago