SELinux stopdisablingselinux.com ↗
A Linux kernel security module for mandatory access control.
ToolSecurity & privacylinuxmandatory-access-controlhardening
Recommended in 2 threads
PHP session.upload_progress heap UAF (CVE-2026-109618 / -109619)jackalsyn.com ·
One commenter suggested it, alongside AppArmor, as a stopgap to contain a compromised PHP process.
Upcoming critical PHP security release (CVE-2026-109618 / -109619)news-web.php.net ·
Proposed to limit what a compromised web process can do.
Similar tools
- AppArmor Security & privacy1 thread
A Linux kernel security module that confines programs with per-application profiles.
- 1 thread
- sandbox-runtime ↗Security & privacy1 thread
Anthropic's lightweight sandbox for restricting filesystem and network access of processes.
- Include Security ↗Security & privacy1 thread
A security consultancy offering penetration testing and application security reviews.
- Certificate Transparency ↗Security & privacy1 thread
A public logging framework that records issued TLS certificates so misissuance can be detected.
- 1 thread
- StageX ↗Security & privacy1 thread
A minimal Linux distribution focused on supply-chain security with signed, reviewed builds.
- Privacy Guides ↗Security & privacy1 thread
A community website recommending privacy tools, including VPN providers.
Also in Security & privacy
- 2 threads
- 2 threads
- Convergence ↗2 threads
Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.
- Ente Photos2 threads
An end-to-end encrypted photo storage service.
- Lockdown Mode ↗2 threads
An optional iOS hardening mode that restricts attachments, web features and connections.
- Paranoid Crypto ↗2 threads
Google's open-source library for detecting weaknesses in cryptographic keys and signatures.
- Tor2 threads
An anonymity network that routes traffic through volunteer relays.
- YubiKey2 threads
A hardware security key supporting FIDO2, PIV and OpenPGP.
- 1Password ↗1 thread
A commercial password manager with a built-in SSH agent that can be unlocked with Touch ID.
- ACME Renewal Information1 thread
An ACME extension that lets CAs tell clients when to renew certificates early.
- AWS WAF1 thread
Amazon's managed web application firewall service.
- AWS-LC1 thread
AWS's general-purpose cryptographic library derived from BoringSSL.
Link from a commenter, not checked or endorsed by us: ↗ https://stopdisablingselinux.com/