Notifications
Clear all
Sandboxing and Execution Isolation
Container and Runtime Hardening
Hardening the container or process environment OpenClaw agents run in — rootless containers, read-only filesystems, dropped capabilities, and runtime security profiles.
Topics: 17 /
Posts: 145
Sandbox Escapes and Breakout Research
Known and theorized sandbox escape paths in OpenClaw — research, CVE discussion, and responsible disclosure coordination. Claims should come with reproducible steps or clear reasoning.
Topics: 16 /
Posts: 94
Seccomp, AppArmor, and LSM Profiles
Writing and tuning Linux Security Module profiles for OpenClaw workloads — sharing working seccomp filters, AppArmor profiles, and discussion of what each syscall restriction actually buys you.
Topics: 37 /
Posts: 190
-
-
-
Check out what I made: a reusable AppArmor pr...Replies: 34
-
-
Step-by-step: using bpftrace to trace syscall...Replies: 37
-
No topics were found here