containers / oci-seccomp-bpf-hookLinks
OCI hook to trace syscalls and generate a seccomp profile
☆338Updated this week
Alternatives and similar repositories for oci-seccomp-bpf-hook
Users that are interested in oci-seccomp-bpf-hook are comparing it to the libraries listed below
Sorting:
- A tool for in-depth analysis of container checkpoints☆131Updated this week
- agent for handling seccomp descriptors for container runtimes☆47Updated last year
- ptrace-based event producer for udig☆68Updated 3 years ago
- Generate a variety of suspect actions that are detected by Falco rulesets☆114Updated 7 months ago
- SELinux policy files for Container Runtimes☆287Updated this week
- Making containers more secure with eBPF and Linux Security Modules (LSM)☆233Updated last year
- A command line tool to automatically generate seccomp profiles.☆27Updated 4 years ago
- ☆34Updated 2 years ago
- Falco plugins registry☆112Updated this week
- The Kubernetes Security Profiles Operator☆825Updated this week
- Response Engine for managing threats in your Kubernetes☆189Updated last month
- Community curated list of System and Network policy templates for the KubeArmor and Cilium☆50Updated last week
- sigstore the hard way!☆116Updated 5 months ago
- 🐝 BPFBox 📦 Exploring process confinement in eBPF☆105Updated 2 years ago
- Kit for building Falco drivers: kernel modules or eBPF probes☆69Updated this week
- eBPF & Cilium Office Hours☆332Updated 7 months ago
- Linux Process Discovery. C Library, Go bindings, Runtime.☆223Updated 3 years ago
- bpflock - eBPF driven security for locking and auditing Linux machines☆151Updated 3 years ago
- Source-code based coverage for eBPF programs actually running in the Linux kernel☆136Updated 11 months ago
- Find your favorite eBee☆74Updated 9 months ago
- ☆93Updated 4 years ago
- Administrative tooling for Falco☆121Updated this week
- Operator to deploy confidential containers runtime☆152Updated this week
- ebpf.io Website☆131Updated last week
- Artifact Ratification Framework (CNCF Sandbox)☆282Updated 3 weeks ago
- A replacement for "kubectl exec" that works over WebSocket connections.☆42Updated last year
- libsinsp, libscap, the kernel module driver, and the eBPF driver sources☆300Updated this week
- Now moved into `github.com/inspektor-gadget/inspektor-gadget/pkg/gadget-collection/gadgets/traceloop`. Tracing system calls in cgroups u…☆200Updated 2 years ago
- Supporting code and demos for KubeCon EU 2023 talk "Malicious Compliance: Reflections on Trusting Container Image Scanners"☆67Updated 2 years ago
- Tools for understanding, measuring, and applying network policies effectively in kubernetes☆121Updated last year