1 repositorio
Awesome GitHub RepositoriesExecution Boundary Hardening
Restricts allowed system calls, architectures, and arguments to harden container execution boundaries against potential host exploits.
Distinct from System Call Filter Analysis: Distinct from System Call Filter Analysis: focuses on enforcing system call restrictions and argument validation for security hardening rather than parsing filter structures.
Explore 1 awesome GitHub repository matching security & cryptography · Execution Boundary Hardening. Refine with filters or upvote what's useful.
Awesome Execution Boundary Hardening GitHub Repositories
Encuentra los mejores repositorios con IA.Buscaremos los repositorios que mejor coincidan usando IA.
- opencontainers/runtime-spec
opencontainers/runtime-spec
3,641Ver en GitHubThe project provides an open container runtime specification and standardized schema for defining container configurations, namespaces, resource limits, security policies, and filesystem mounts across platforms. It outlines the formal configuration formats, lifecycle operations, and execution environments necessary for portable, isolated container workloads. The specification covers container lifecycle management protocols and structured rules governing container creation, execution startup, process signaling, state tracking, and resource teardown. It standardizes local bundle packaging and
Restricts allowed system calls, architectures, and arguments to harden container execution boundaries against potential host exploits.
Gocontainersdockeroci
