#Seccomp-bpf-policies

google

nsjail

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

elastic

go-seccomp-bpf

Go library for installing a seccomp BPF system call filter.