Learn AI, Data Science & Business — Earn Certificates That Get You Hired
AI Engineer - Learn how to integrate AI into software applications
Overview
Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This talk explains how to create a Linux application sandbox using system APIs. It covers namespaces and filters, and shows how Docker and Chromium use these mechanisms to isolate applications and protect the system.
Syllabus
Intro
What is a sandbox
namespaces
uid namespace
mount namespace
get rid of processes
Network namespace
Other namespaces
Writing filters
Checking arguments
Taught by
NDC Conferences