3 stories tagged kernel-security, newest first.
762 points by atombender | 172 comments
Landing page for Agent Safehouse, a macOS-native sandboxing tool that restricts local AI coding agents' write access to a chosen working directory.
460 points by Zoup | 155 comments
GitHub repository for landrun, a Go tool that runs Linux processes in an unprivileged sandbox using the Landlock LSM, with filesystem and network restrictions.
451 points by todsacerdoti | 181 comments
A Medium article by Random Augustine examining Apple's exclaves, an isolation mechanism in Apple's operating systems.