capsicumizer | Run anything under Capsicum

capsicumizer is a C++ library. capsicumizer has no bugs, it has no vulnerabilities, it has a Permissive License and it has low support. You can download it from GitHub.

capsicumizer is a sandbox launcher that imposes Capsicum capability mode onto an unsuspecting program, allowing "sysadmin style" or "oblivious" sandboxing (i.e. no source code modifications, all restrictions added externally). You just write AppArmor-esque "profiles" and capsicumizer takes care of sandboxing the applications. capsicumizer is capable of launching some GUI applications (like gedit) on both Wayland and X11. (GTK 3.24 required because of this patch). Note: applications that use syscalls directly (instead of going through libc) — namely, anything compiled with Golang's official compiler — won't be able to actually access files under the allowed paths. This is because we rely on LD_PRELOADing a library (libpreopen) that overrides libc functions like open to make them use openat style functions with pre-opened directory descriptors.