A lightweight process isolation tool that utilizes Linux namespaces, cgr...
eBPF Python runtime sandbox with seccomp (Blocks RCE).
Go library for installing a seccomp BPF system call filter.