bane by genuinetools

Custom & better AppArmor profile generator for Docker containers.

created at Oct. 8, 2015, 11:45 p.m.

34 +0

1,147 +0

85 +1

sysdig-container-ecosystem by draios

The Container Ecosystem Project

created at Oct. 21, 2015, 2:36 a.m.

32 +0

108 +0

22 +0

subuser by subuser-security

Run programs on linux with selectively restricted permissions.

created at Feb. 9, 2014, 11:17 p.m.

26 -1

885 +0

65 +0

Whaler by P3GLEG

Program to reverse Docker images into Dockerfiles

created at June 5, 2018, 3:37 a.m.

24 +0

1,027 +0

92 +0

sockguard by buildkite

A proxy for docker.sock that enforces access control and isolated privileges

created at Dec. 2, 2017, 8:12 a.m.

22 +1

143 +0

22 +0

libct by xemul

Linux containers control plane

created at April 2, 2014, 11:37 a.m.

17 +0

105 +0

25 +0

oci-seccomp-bpf-hook by containers

OCI hook to trace syscalls and generate a seccomp profile

created at Sept. 21, 2019, 2:31 p.m.

14 +0

287 +2

34 +0

drydock by zuBux

drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates

created at Oct. 23, 2015, 2:57 p.m.

8 +0

63 +0

9 +0

lxroot by parke

A lightweight, flexible, and safer alternative to chroot and/or Docker.

created at Feb. 2, 2020, 1:52 a.m.

8 +0

97 +0

9 +0

pyspaces by Friz-zy

Works with Linux namespaces througth glibc with pure python

created at April 12, 2015, 8:59 a.m.

7 +0

87 +0

12 +0

docker-pushrm by christian-korneck

"Docker Push Readme" - a Docker CLI plugin to update container repo docs

created at May 27, 2020, 1:02 a.m.

5 +0

131 +1

4 +0

multidocker by marty90

Creates a system where users are forced to login in dedicated independent docker containers.

created at June 24, 2017, 3:07 p.m.

4 +0

51 +0

9 +0