mirror of https://github.com/NVIDIA/OpenShell.git synced 2026-10-14 04:59:28 +08:00

Files

T

History

Eric Curtin cfe9850145 fix(sandbox): name Landlock ABI in startup error (#4413 )

Signed-off-by: Eric Curtin <eric.curtin@docker.com>

2026-10-12 20:05:05 +00:00

src

fix(sandbox): name Landlock ABI in startup error (#4413 )

2026-10-12 20:05:05 +00:00

tests

feat(isolation): implement the RFC 0012 sandbox architecture (#2942 )

2026-09-16 00:49:14 +00:00

Cargo.toml

refactor(runtime): confine and reduce unsafe code (#4130 )

2026-10-10 01:12:03 +00:00

README.md

refactor(runtime): confine and reduce unsafe code (#4130 )

2026-10-10 01:12:03 +00:00

README.md

Sandbox runtime

openshell-sandbox owns the Linux workload isolation mechanisms and their kernel qualification probes. The linux module contains seccomp notifications and child filters, task-memory access, process-signal mediation, procfs descriptor lookup, socket identity, Landlock qualification, and the workload launch thread.

sandbox::linux composes policy enforcement. The top-level linux module owns the lower-level mechanisms used by that orchestration and the boundary server. Unsafe kernel ABI, process-launch, and descriptor-ownership operations stay in this runtime crate behind safe APIs where their contracts can be enforced.