nsjail

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security. It utilizes Linux namespace subsystem, resource limits, and the seccomp-bpf syscall filters of the Linux kernel.

Features

Isolate networking services (e.g. web, time, DNS), by isolating them from the rest of the OS
Host computer security challenges (so-called CTFs)
Contains invasive syscall-level OS fuzzers
Offers three distinct operational modes
Utilizes kafel seccomp-bpf configuration language for flexible syscall policy definitions
Uses expressive, ProtoBuf-based configuration file

Project Samples

Project Activity

See All Activity >

License

Apache License V2.0

Follow nsjail

nsjail Web Site

Other Useful Business Software

Cut Data Warehouse Costs by 54%

Easily migrate from Snowflake, Redshift, or Databricks with free tools.

BigQuery delivers 54% lower TCO with exabyte scale and flexible pricing. Free migration tools handle the SQL translation automatically.

Start Free

Rate This Project

User Reviews

Be the first to post a review of nsjail!

Additional Project Details

Operating Systems

Linux, Mac, Windows

Programming Language

C++

Related Categories

C++ Security Software

Registered

2024-06-20

Similar Business Software

Files.com

Files.com is a cloud-native Managed File Transfer (MFT) platform that unifies file transfers, sharing, and automation across any cloud, protocol, or partner. It connects 50+ storage systems — including Amazon S3, Azure, Google Drive, SharePoint, Dropbox, and Box — presenting them as a single...

See Software for Files.com
Firejail

Firejail is a SUID program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces and seccomp-bpf. It allows a process and all its descendants to have their own private view of the globally shared kernel resources, such...

See Software for Firejail
ManageEngine Endpoint Central

ManageEngine Endpoint Central gives IT teams a single platform to manage and secure every device across the organization, eliminating the need to juggle multiple point tools. Patch management is automated across Windows, macOS, Linux, and 1000+ third-party applications. Software deployment,...

See Software for ManageEngine Endpoint Central
Control D

Control D is a customizable DNS filtering and traffic redirection platform that leverages Secure DNS protocols like DNS-over-HTTPS, DNS-over-TLS and DNS-over-QUIC, with support for Legacy DNS. - Block malicious threats - Block unwanted types of content network wide (ads & trackers, IoT...

See Software for Control D
Admin By Request Endpoint Privilege Management

Admin By Request EPM gives organizations control over who and what can elevate on their endpoints, without standing up servers, databases, or a dedicated admin team to run it. The model is least privilege: a user or an application receives the specific access its task requires and nothing more....

See Software for Admin By Request Endpoint Privilege Management
Blumira

Empower Your Current Team to Achieve Enterprise-Level Security An all-in-one solution with SIEM, endpoint visibility, 24/7 monitoring, and automated response to reduce complexity, increase visibility and speed up time to respond. We handle the security heavy lifting, so you get time back...

See Software for Blumira