1 repository
Creation of virtualized environments with dedicated filesystems and network stacks to isolate applications.
Distinct from Virtualization Environments: Focuses on OS-level virtualization of resources (namespaces) for a single application rather than full VM platforms.
Explore 1 awesome GitHub repository matching operating systems & systems programming · Application Resource Virtualization. Refine with filters or upvote what's useful.
Firejail is a Linux application sandbox and kernel security wrapper that isolates untrusted applications from the host system. It uses kernel namespaces and seccomp filters to restrict filesystem access, drop kernel capabilities, and limit the system attack surface. The project is distinguished by its use of predefined security profiles to automatically apply filesystem restrictions and syscall limits based on the executable being launched. It provides specialized isolation for portable packages such as AppImages and implements X11 display isolation via proxy servers to prevent keyboard loggi
Creates a virtualized environment with a dedicated filesystem and network stack to separate an application from the host.