Privilege-separated secure DHCPv4 client for Linux.
-
Updated
Jul 6, 2026 - C
#
privilege-separation
Here are 19 public repositories matching this topic...
Dynamic loading with privilege separation
-
Updated
Oct 7, 2024 - C
Avant-garde Network Application Server for illumos.
-
Updated
Mar 18, 2023 - Rust
Kernel-enforced sandboxing for untrusted processes. Two zero-dependency core tools, one shared profile format, plus an optional BPF-LSM module.
linux security namespace sandboxing process-isolation hardening ebpf seccomp linux-security-module privilege-separation defense-in-depth landlock bpf-lsm syscall-filtering
-
Updated
Jun 11, 2026 - Shell
Adds restrictive patterns to Crystal
-
Updated
Mar 20, 2021 - Crystal
Fast, kernel-enforced application sandbox for macOS and Linux. Default-deny TOML profiles, Seatbelt + Landlock + seccomp + namespaces under the hood. Pasta/slirp4netns auto-plumbed network with per-IP nftables.
macos linux rust cli security ipc sandbox sandboxing seccomp isolation cage seatbelt privilege-separation devsecops container-security defense-in-depth supply-chain-security landlock appsandbox
-
Updated
Jul 18, 2026 - Rust
Splits privileges between an unprivileged user account and a separate sysmaint account
-
Updated
Jul 21, 2026 - Shell
Reliability control plane for scoped VPN, proxy and access-continuity paths — crash-consistent policy generations, privilege-separated stores, replay-proof action leases.
go macos infrastructure distributed-systems terraform reliability postgresql vpn control-plane access-control privilege-separation crash-consistency
-
Updated
Aug 23, 2026 - Go
Human-approved sudo/root command broker for local AI agents
linux golang security systemd sudo privilege-escalation grok human-in-the-loop privilege-separation ai-agents least-privilege ai-agent
-
Updated
Aug 24, 2026 - Go
Splits privileges between an unprivileged user account and a separate sysmaint account
-
Updated
Jul 21, 2026 - Shell
Two-stage security architecture to mitigate indirect prompt injection attacks in rich content via privilege separation
mcp sandboxing threat-modeling privilege-separation ai-agents ai-security prompt-injection llm-security pdf-security owasp-llm-top-10 multimodal-security indirect-prompt-injection
-
Updated
Jul 21, 2026
The Project work done at IITK
-
Updated
Oct 4, 2020 - Python
Keeps your Mac awake only while AI agents are working. Session-aware sleep management for Claude Code, OpenCode & long jobs; clamshell support, MIT.
python macos launchd cli homebrew daemon opencode tui pmset developer-tools sleep launchdaemon caffeinate power-management privilege-separation ai-agents launchagent clamshell keep-awake claude-code
-
Updated
Jul 31, 2026 - Python
MIT 6.858 Computer Systems Security (2022) labs on the zoobar app: buffer-overflow exploits, privilege separation, a Z3 symbolic-execution bug-finder, browser-security attacks, and the SecFS secure file system. Educational self-study.
security xss symbolic-execution buffer-overflow privilege-separation csdiy mit-6858 computer-systems-security secfs zoobar
-
Updated
Jul 9, 2026 - Python
Privilege-separated LLM agent — ring-fence the blast radius
privilege-separation ai-agents red-teaming ai-security llm prompt-injection llm-security agent-security
-
Updated
Jun 10, 2026 - Python
Binário setuid root, escrito em Rust, que executa as operações privilegiadas do Selynt Panel em servidores DirectAdmin. Faz a mediação entre o painel e o sistema — ciclo de vida dos processos, isolamento, limites de recursos e integração com o servidor web — abandonando privilégio antes de qualquer lógica e respondendo em JSON.
linux rust cli process-manager multi-tenant systemd sandbox hosting reverse-proxy agpl unix-socket cgroups musl shared-hosting isolation setuid directadmin privilege-separation resource-limits privilege-dropping
-
Updated
Aug 26, 2026 - Rust
Self-hosted deployment platform whose control panel never runs as root — privilege-separated Go daemon + typed schema-whitelisted executor, hash-chained audit log, no open ports.
electron go docker golang security devops protobuf deployment sqlite systemd grpc self-hosted caddy infrastructure-as-code audit-log homelab privilege-separation blue-green-deployment container-security least-privilege
-
Updated
Aug 20, 2026 - Go
Improve this page
Add a description, image, and links to the privilege-separation topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the privilege-separation topic, visit your repo's landing page and select "manage topics."