Search Results for "sandbox"

...Instead of trusting ad-hoc C, Wuffs code is compiled to C with strong bounds, integer, and state checks inserted by construction, aiming to eliminate whole classes of security bugs without a heavy runtime. The design prioritizes predictable performance: decoders avoid dynamic allocation by default, return explicit “short read” signals, and run well in streaming or sandbox-free environments. The project ships battle-tested, CPU-friendly implementations for common image/container formats and bit-twiddly primitives like Huffman and checksum routines. Its standard library emphasizes portability and constant-time behavior where appropriate, which is valuable in security-sensitive contexts. Because the language is purpose-built, the resulting C output is small, auditable, and easy to embed in larger systems.

...This makes it useful for experimenting with package installation, system changes, and other shell commands where users want a chance to review the outcome first. The project is careful not to position itself as a full security sandbox, since trusted commands can still make network calls and the tool is presented as a prototype rather than a complete isolation boundary. It supports multiple Linux distributions and can fall back to mergerfs or unionfs in environments where overlayfs on nested mounts does not work as expected. In practice,

...Join #AppImage on irc.libera.chat. Download an application, make it executable, and run! No need to install. No system libraries or system preferences are altered. Can also run in a sandbox like Firejail. Distribute your desktop Linux application in the AppImage format and win users running all common Linux distributions. Package once and run everywhere. Reach users on all major desktop distributions. Here is an application packaged as an AppImage for you to try. Just download the application, make it executable, and run! ...

...See project page at https://github.com/openjudge/sandbox for details.

Rust is a drag&drop RPM creation utility and general purpose sandboxing toolkit. You can create RPM packages intuitively with the GUI. Rust may also be used to build RPMs for arbitrary source code, just by doing a 'make install' in the sandbox...

EaseFilter Secure Sandbox was developed by a set of file system filter driver software development kit which includes file access control filter driver, transparent file encryption filter driver and process filter driver. The EaseFilter Secure Sandbox encompasses file security, file encryption, file monitoring, data loss prevention and process monitoring and protection.