nsjail
C++
★ 0
updated 6y ago
⑂ fork
A light-weight process isolation tool, making use of Linux namespaces and seccomp-bpf syscall filters (with help of the kafel bpf language)
No plain-English explanation yet — one is being written right now. Check back in a minute.