Explore projects

https://doi.org/10.1007/978-3-030-42051-2_17 HardenedBSD Bunkers are security enhanced Jails with non-IP UNIX sockets enforcement and execve() syscall disabled. This kernel module allows for bit-exact whitelisting of statically compiled binaries.