Application Sandboxing>Making your own policies/profiles: Add crabsecco

[rusty-snake]

Name: crabsecco
Repository: https://codeberg.org/crabjail/crabsecco
Author: me _{(I also maintain the libseccomp-rs crate)}
Where?: Application Sandboxing > Making your own policies/profiles
Description: crabsecco makes it easier to write and compile seccomp-bpf filters (as used by bubblewrap's --seccomp/--add-seccomp-fd arguments). It acts as a compiler which compiles seccomp-filters defined in a toml file to bpf/pfc filters which can be used with tools like bubblewrap/for debugging. This makes makes writing seccomp-bpf filters because you don't need to write (C-)code.

[dngray]

I think of doing something like this along a similar vein privacyguides/privacyguides.org#1861.

This would make perfect content for a blog article, would that be something you'd be interested in doing @rusty-snake?

[rusty-snake]

I don't have the time to do it as primary author, but I'm interested to help on that as a secondary author/reviewer.

[dngray]

Unfortunately I don't have enough experience with creating bubblewrap profiles to be able to write this article, it would need someone who has done it before.

[dngray]

Ill approve this one, with a contributing label.

I really wouldn't mind adding this, but it does require some background to put together a guide.