A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
-
Updated
Nov 26, 2025 - C++
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
Sample application that shows how to create a Plugin Framework for a WPF application
A .NET tool that uses AppDomain's to enable dynamic execution and escape detection.
Joblet is a micro-container runtime for running Linux jobs with: Process and filesystem isolation (PID namespace, chroot) Fine-grained CPU, memory, and IO throttling (cgroups v2) Secure job execution with mTLS and RBAC Built-in scheduler, SSE log streaming, and multi-core pinning Ideal for: Agentic AI Workloads (Untrusted code)
A lightweight process isolation tool, requiring absolutely no privileges to run
A library for .NET framework applications to discover, install, and manage plugins from NuGet feeds, running each plugin in an isolated process for maximum stability.
Isolated OTP application management system for Elixir/Erlang
It's a fancy process isolation tool that creates an isolated environment for your binary in under 10 minutes and lets you reset the execution state in under seconds. All this, with a couple of one-liner commands from your trusty terminal.
Sandbox untrusted Rust code with isolated processes
A light process isolation sandbox used for Competitive Programming contest
A Toy linux Container With Alpine Linux Mini Root File System
Projet INSA 5e année : Implémenter en C et assembleur ARMv7 les mécanismes fondamentaux d'un OS : gestion de la stack, context-switch, paging...
Modern C++23 sandboxing and process isolation library. Provides a clean API for launching processes with resource limits, timeouts, and controlled execution. Currently Windows-only (Job Objects), with Linux/macOS planned.
Minimal docker-like Linux process isolation (aka containers)
The GenCyber 10 Security First Principles are a set of fundamental best practices and guidelines for cybersecurity
Judgement and contest platform with processes isolation
Implementation of a secure, low-level application designed on CertiKOS formally verified operating system kernel. Simulation of an autonomous satellite critical susystems - environmental monitoring, task scheduling and watchdog diagnostics - within a trusted computing environment. Developed as part of my diploma thesis at the University of Patras.
This project demonstrates policy enforcement for user applications at kernel level without need of recompiling/patching existing kernel.
A low-level OCI compliant container runtime for modern Linux.
Add a description, image, and links to the process-isolation topic page so that developers can more easily learn about it.
To associate your repository with the process-isolation topic, visit your repo's landing page and select "manage topics."