mirror of
https://github.com/criyle/go-sandbox.git
synced 2025-11-04 14:49:53 +08:00
8 lines
297 B
Go
8 lines
297 B
Go
// Package forkexec provides interface to run a subprocess with seccomp filter, rlimit and
|
|
// containerized or ptraced.
|
|
//
|
|
// unshare cgroup namespace requires kernel >= 4.6
|
|
// seccomp, unshare pid / user namespaces requires kernel >= 3.8
|
|
// pipe2, dup3 requires kernel >= 2.6.27
|
|
package forkexec
|