sydbox is a ptrace-based sandbox implementation. It intercepts system calls, checks for allowed filesystem prefixes, and denies them when checks fail. It has basic support for disallowing network connections. It has basic support to sandbox execve calls. It is based in part on catbox and strace.
主页：http://freecode.com/projects/sydbox
下载：https://github.com/psychoschlumpf/sydbox
来自:开源中国社区
