The lazypoline syscall interposer

strace2seccomp - generates libseccomp policies from strace logs

The sandbox for segment-judger using linux namespace, cgroup and seccomp

Low level libseccomp bindings for Node.js

A Falco based project that help me/you to add a better understanding of security in docker and Linux capabilities

Websocket Server for Hext. Hext is a domain-specific language for extracting structured data from HTML documents.

A simple sandbox to practice linux security primitives

Lavida judger.

A language and CLI for defining Seccomp BPF rules in a higher level way

optrace records output files written by each process and accumulates total written data size

A tool for limiting syscalls, process can make, by their arguments