{"id":24422470,"url":"https://github.com/ricardobranco777/unsandbox","last_synced_at":"2026-04-21T21:02:56.704Z","repository":{"id":272016978,"uuid":"915269143","full_name":"ricardobranco777/unsandbox","owner":"ricardobranco777","description":"Disable sandbox","archived":false,"fork":false,"pushed_at":"2025-02-14T23:08:55.000Z","size":26,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-02-14T23:26:24.434Z","etag":null,"topics":["capsicum","freebsd","illumos","landlock","linux-capabilities","openbsd","pledge","sandbox"],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-2-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ricardobranco777.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2025-01-11T12:13:02.000Z","updated_at":"2025-02-14T23:08:59.000Z","dependencies_parsed_at":"2025-01-11T13:43:23.064Z","dependency_job_id":"fb1e7e69-5d85-4301-bfd4-2fdfccbac89e","html_url":"https://github.com/ricardobranco777/unsandbox","commit_stats":null,"previous_names":["ricardobranco777/unsandbox"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ricardobranco777%2Funsandbox","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ricardobranco777%2Funsandbox/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ricardobranco777%2Funsandbox/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ricardobranco777%2Funsandbox/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ricardobranco777","download_url":"https://codeload.github.com/ricardobranco777/unsandbox/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243419584,"owners_count":20287913,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["capsicum","freebsd","illumos","landlock","linux-capabilities","openbsd","pledge","sandbox"],"created_at":"2025-01-20T10:14:18.633Z","updated_at":"2025-12-28T22:02:22.714Z","avatar_url":"https://github.com/ricardobranco777.png","language":"C","funding_links":[],"categories":[],"sub_categories":[],"readme":"\nDisable sandbox via shared-library hijacking\n\nThis does the opposite of [libsandbox](https://github.com/ricardobranco777/libsandbox)\n\nSupported sandboxes:\n  - FreeBSD [capsicum](https://man.freebsd.org/cgi/man.cgi?query=capsicum\u0026sektion=4)\n  - OpenBSD [pledge](https://man.openbsd.org/pledge)\n  - Illumos [privileges](https://illumos.org/man/7/privileges)\n  - Linux\n    - [landlock](https://man7.org/linux/man-pages/man7/landlock.7.html)\n    - [prctl](https://man7.org/linux/man-pages/man2/PR_SET_NO_NEW_PRIVS.2const.html)\n    - [seccomp](https://man7.org/linux/man-pages/man2/seccomp.2.html)\n    - [SELinux](https://man7.org/linux/man-pages/man3/is_selinux_enabled.3.html)\n\n## Usage\n\n```\nmake\nSYSTEM=$(uname -s)\nLD_PRELOAD=$PWD/$SYSTEM/libunsandbox.so program [options] [arguments]\n```\n\nSee **ld.so**(8) manpage for alternatives to `LD_PRELOAD`\n\n## BUGS / Limitations\n  - Doesn't support statically compiled binaries\n  - Doesn't support setuid/setgid binaries\n  - Doesn't work on HardenedBSD unless the `hardening.harden_rtld` sysctl is set to zero\n  - Illumos still use some 32-bits binaries in userland and you may get `wrong ELF class: ELFCLASS64`\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fricardobranco777%2Funsandbox","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fricardobranco777%2Funsandbox","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fricardobranco777%2Funsandbox/lists"}