README.en.md · ilaotan/safeguard

forked from openEuler/safeguard

加入 Gitee

与超过 1200万开发者一起发现、参与优秀开源项目，私有仓库也完全免费：）

免费加入

文件

克隆/下载

README.en.md 988 Bytes

一键复制编辑原始数据按行查看历史

提交于 2023-12-17 13:59 . update README.en.md.

# safeguard: KRSI(eBPF+LSM) based Linux security auditing tool

safeguard is a Linux audit and observer tool based on eBPF.
Security events can be audited and blocked based on the container of the process, and restrictions can be applied to container environments.

# Features

* Restriction rules based on process context, such as command name or UID and more
* Restrictions limited to containers
* Network Access Control
* File Access Control
* Restrictions bind mounts from host filesystem to containers

# Build

```shell
$ git clone --recursive https://gitee.com/openeuler/safeguard.git && cd safeguard
# $ vagrant up && vagrant reload
# $ vagrant ssh

$ make libbpf-static
$ make build

sudo ./build/safeguard --config config/safeguard.yml #|grep BLOCK
```



# LICENSE

safeguard's userspace program is licensed under Apache License 2.0 License.  
eBPF programs inside [pkg/bpf directory](pkg/bpf) are licensed under [GNU General Public License version 2](./pkg/bpf/LICENSE.md).

马建仓 AI 助手

尝试更多

代码解读

代码找茬

代码优化

https://gitee.com/ilaotan/safeguard.git

git@gitee.com:ilaotan/safeguard.git

ilaotan

safeguard

master

ilaotan/safeguard

简介

发行版

贡献者

近期动态

ilaotan/safeguard .gitee-modal { width: 500px !important; }

简介

发行版

贡献者

近期动态

搜索帮助

ilaotan/safeguard