blueteamsec

747 readers

19 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 3 years ago

MODERATORS

digicat@infosec.pub

Z-Jail: A lightweight, multi-layer Linux sandbox combining namespaces, pivot_root, seccomp-bpf, capability dropping, and an evidence-based verdict engine) for secure, auditable code execution. (github.com)

submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

3 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] thorhop@sopuli.xyz 1 points 1 month ago

Maybe this should be floated as an alternative to bwrap in the upcoming flatpak rewrite. More security for the user is always better, especially in these times even SecOps is playing catch up with recent AI based audits, that a "better safe than sorry" approach is preferred.