Hardening linux processes : extending Grsecurity to integrate system call filters and namespaces

"The area Of Linux sandboxing has various developments in recent years with the introduction of operating system containers and the ever present need to harden the security of applications. Two of the more prominent technologies that have been used when creating sandboxes are namespaces and sys...