A MAC (Mandatory Access Control) module for FreeBSD that identifies executables based on their hash digest, and objects based on their st_dev/i_num. It supports transparent sandboxing at single process level.
Primary LanguageCBSD 2-Clause "Simplified" LicenseBSD-2-Clause