{"id":24486181,"url":"https://github.com/tamimehsan/simple-sandbox","last_synced_at":"2025-03-14T22:12:24.256Z","repository":{"id":240536842,"uuid":"802900343","full_name":"TamimEhsan/Simple-Sandbox","owner":"TamimEhsan","description":"A simple sandbox to practice linux security primitives","archived":false,"fork":false,"pushed_at":"2024-05-23T19:52:22.000Z","size":11,"stargazers_count":2,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-01-21T14:38:26.629Z","etag":null,"topics":["sandbox","seccomp"],"latest_commit_sha":null,"homepage":"","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/TamimEhsan.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-05-19T15:10:45.000Z","updated_at":"2024-05-23T19:52:25.000Z","dependencies_parsed_at":"2024-05-19T16:32:31.919Z","dependency_job_id":"ae76a69d-aeb8-42e6-9c79-62f66dfe0d8e","html_url":"https://github.com/TamimEhsan/Simple-Sandbox","commit_stats":null,"previous_names":["tamimehsan/simple-sandbox"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TamimEhsan%2FSimple-Sandbox","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TamimEhsan%2FSimple-Sandbox/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TamimEhsan%2FSimple-Sandbox/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TamimEhsan%2FSimple-Sandbox/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/TamimEhsan","download_url":"https://codeload.github.com/TamimEhsan/Simple-Sandbox/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243652703,"owners_count":20325611,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["sandbox","seccomp"],"created_at":"2025-01-21T14:33:32.116Z","updated_at":"2025-03-14T22:12:24.236Z","avatar_url":"https://github.com/TamimEhsan.png","language":"C++","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Simple Sandbox\r\n\r\nLet's try to create a simple sandbox and in turn learn the inner workings of linux security primitives like seccomp, cgroups and namespaces\r\n\r\nYou can find detailed explanations inside each folder.\r\n\r\nAt first let's try to work with seccomp which means secure computing mode. \r\n### 1. Running simple C program inside  sandbox\r\nAt first we will try to run a simple c program inside a sandbox using `execve`\r\n### 2. Seccomp strict mode\r\nWe will see how seccomp strict mode allows a very strict pool of system call\r\n### 3. Add filter to sandbox\r\nUsing seccomp rules we initialize sandbox to block everything, then add rules to allow the bare minimum.\r\n### 4. Get Resource Usage\r\nWe will try to find the resource usage of the sandboxed process. We will also refactor the code to allow monitoring the child.\r\n### 5. Set Resource Usage\r\nIn this part we will limit the resource usage of the sandboxed program to a certain upper bound.","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftamimehsan%2Fsimple-sandbox","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftamimehsan%2Fsimple-sandbox","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftamimehsan%2Fsimple-sandbox/lists"}