anthropic-experimental/sandbox-runtime

Features

• Process Isolation - Isolates processes within native operating system boundaries to restrict access to system resources.
• Filesystem Access Filtering - Enforces strict path-based permissions using glob-pattern filtering for filesystem operations.
• Filesystem Access Controls - Enforces read and write permissions using allowlists and glob patterns to prevent unauthorized file access.
• System Call Interceptors - Intercepts and blocks unauthorized operating system calls based on predefined security policies and allowlists.
• System-Call Interception - Intercepts system calls to block unauthorized filesystem or network operations.
• Filesystem Permissions - Enforces strict read and write permissions on files and directories using allowlists and denylists.
• Allowlist-Based Access Controls - Implements a strict deny-by-default security policy to control access to system resources.
• System-Call Access Controllers - Blocks unauthorized resource requests and monitors security violations by controlling system calls at the OS level.
• Network Access Restrictions - Filters outgoing network traffic using allow-only patterns and domain wildcards.
• Network Traffic Filtering - Restricts outgoing connections to specific domains and routes traffic through proxies for auditing.
• Process Sandboxes - Runs commands, agents, or servers in an isolated environment to enforce filesystem and network boundaries.
• Process Sandboxing - Restricts filesystem and network access for arbitrary processes to create a secure execution sandbox.
• Secure Execution Wrappers - Functions as a cross-platform security wrapper for Linux and macOS to isolate untrusted code from the host.
• Security Isolation Mechanisms - Encloses arbitrary processes within security boundaries to isolate them from the host system.
• Cross-Platform System Hardening - Provides a unified tool for enforcing system-level boundaries and hardening on both Linux and macOS.
• Host-Process Isolation - Isolates processes from the underlying host machine by wrapping commands and library calls in security boundaries.
• OS-Level Virtualization - Implements system-call interception to isolate processes from the host filesystem and network without using full containerization.
• Security Wrapping - Wraps processes in native OS boundaries to isolate them from the host machine.
• Filesystem Access Restrictions - Controls read and write permissions at the OS level using deny-then-allow patterns.
• Secure Command Wrapping - Wraps shell commands or library calls in a secure environment to restrict host access.
• Network Proxies - Redirects all outgoing network traffic through an external proxy for deep packet inspection and auditing.
• Traffic Proxying - Routes sandboxed network traffic through external proxies for deep packet inspection and auditing.
• Unix Socket Restrictions - Blocks the creation of local communication sockets using system filters on Linux and macOS.
• Socket Blocking - Prevents the creation of local Unix sockets using system-level filters.
• System Call Monitors - Detects and logs unauthorized system calls in real time to identify and monitor security violations.
• Sandbox Violation Monitoring - Detects and logs unauthorized attempts to access restricted system resources in real time.

Star history