
firejail
Linux namespaces and seccomp-bpf sandbox
defensive-toolsprivacysecurity-virtualization

Linux namespaces and seccomp-bpf sandbox

dawg the hallway monitor - monitor operating system changes and analyze introduced attack surface when installing software