landlock-lsm / linuxLinks
Linux kernel - See Landlock issues
☆44Updated last month
Alternatives and similar repositories for linux
Users that are interested in linux are comparing it to the libraries listed below
Sorting:
- IPE is a Linux Security Module (LSM), which allows for a configurable policy to enforce integrity requirements on the whole system. IPE b…☆67Updated last month
- Sandboxing File System☆46Updated 6 years ago
- A language and library for specifying syscall filtering policies.☆342Updated last month
- a friendly wrapper around ptrace☆134Updated 3 years ago
- eBPF - extended Berkeley Packet Filter tooling☆132Updated 3 years ago
- unofficial grsecurity gpl release☆24Updated 7 years ago
- opensnoop in pure C using eBPF☆102Updated 8 months ago
- Transform vmlinuz into a fully debuggable vmlinux that can be used with /proc/kcore☆132Updated last year
- Disabling kernel lockdown on Ubuntu without physical access☆81Updated 3 years ago
- ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.☆118Updated 3 weeks ago
- Tool tracing syscalls in a fast way using eBPF linux kernel feature☆100Updated 2 years ago
- Kernel Test Framework☆149Updated last month
- Trusted Path Execution (TPE) Linux Kernel Module☆163Updated 6 years ago
- Tools for doing upstream Linux kernel development, patch wrangling, builds, and testing☆56Updated 3 weeks ago
- A high level language for SELinux policy☆59Updated 5 months ago
- LKRG bypass methods☆73Updated 5 years ago
- The Hedron Microhypervisor☆81Updated 2 years ago
- Demonstrate ability to read memfd_secret() data from the kernel☆58Updated 2 years ago
- GUSTAVE is a fuzzing platform for embedded OS kernels. It is based on QEMU and AFL (and all of its forkserver siblings). It allows to fuz…☆202Updated 4 years ago
- Detect patterns of bad behavior in function calls☆25Updated 5 years ago
- estimate peak virtual memory use☆18Updated 9 months ago
- Converged Security Suite for Intel & AMD platform security features☆68Updated 3 weeks ago
- A place to store my toy linux-security modules.☆91Updated 4 years ago
- sandboxing and containment tool used in ChromeOS and Android☆352Updated 2 weeks ago
- Run any command transparently in a VM (this repo isn't part of Cappsule)☆27Updated 8 years ago
- A Genetic File, Syscall and Network Fuzzer.☆58Updated 8 years ago
- Load-time selective binary rewriting☆164Updated 3 years ago
- Static code analysis of refpolicy style SELinux policy☆46Updated 9 months ago
- Information about Linux system calls on different architectures☆171Updated 3 weeks ago
- Simple Linux seccomp rules without writing any code☆514Updated 6 months ago