fork from https://mrtc0.github.io/bouheki
just for fun~~

bouheki is KRSI(eBPF+LSM) based Linux security auditing tool.
Security events can be audited and blocked based on the container of the process, and restrictions can be applied to container environments.

• Restriction rules based on process context, such as command name or UID and more
• Restrictions limited to containers
• Network Access Control
• File Access Control
• Restictions bind mounts from host filesystem to containers

https://mrtc0.github.io/bouheki

bouheki's userspace program is licensed under MIT License.
eBPF programs inside pkg/bpf directory are licensed under GNU General Public License version 2.