Software Engineer @SafeDep |
Go | Backend Development

github

Sahil Bansal  • Peerlist

Runbox is an lightweight sandboxing system built from scratch in C, designed for understanding and implementing standard sandboxing practices. Utilizing Linux namespaces, seccomps &amp; cgroups v2. It is open source, encouraging contributions and collaboration from the community. It is designed to be run from the command line, providing a minimal shell environment for executing commands within an isolated environment.<h3>Key Features</h3><ul><li>User Namespace: Isolates user and group IDs for contained processes.</li><li>PID Namespace: Provides a separate isolated process tree.</li><li>Mount Namespace: Creates an isolated filesystem using tmpfs and mounts essential directories as read-only.</li><li>IPC Namespace: Offers isolation for System V IPC objects and POSIX message queues.</li><li>Network Namespace: Supports full network isolation with plans for advanced setups.</li><li>Seccomp: Implements a syscall allowlist filter using BPF.</li><li>Cgroups v2: Limits resource usage by the sandbox, supporting CPU, memory, and PID limitations.</li></ul>

Runbox

PMG is a security wrapper for package managers that:<ul><li>Blocks malicious packages at install time using SafeDep Cloud</li><li>Performs deep dependency analysis and transitive dependency resolution</li><li>Works seamlessly with existing package managers</li><li>Requires zero configuration - just install and use</li><li>Protects in real-time without slowing down your workflow</li></ul>

PMG (Package Manager Guard)

AtomixDB is a minimal, persistent relational database crafted in Go, emphasizing storage and transaction management. It leverages a B+ Tree for fast indexing, a free list for node reuse, and supports transactions and concurrent reads for reliability and performance. Still evolving, it’s tackling query processing and bug fixes next.

Sahil Bansal

Software Engineer @SafeDep | Go | Backend Development