lsm

learn database internals by building a storage engine in Rust

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

🗻 Log-structured, embeddable key-value storage engine written in Rust

Pure Rust LSM-tree based embedded storage engine

vArmor is a cloud-native container hardening system that leverages AppArmor/BPF/Seccomp and NetworkProxy technologies to enforce access control from system calls to application protocols — protecting workloads including AI Agents.

K.I.S.S. LSM-tree implementation in safe Rust

Making containers more secure with eBPF and Linux Security Modules (LSM)

bpflock - eBPF driven security for locking and auditing Linux machines

分布式键值系统，供学习使用，不断完善中。截至目前：根据LSM论文，并结合CPP已有的实现，利用Java实现了LSM架构；综合Dubbo等框架的特点，实现了简洁的RPC框架。

LevelDB implemented in C (unofficial -- not affiliated with Google in any way)

LSM-based key-value store in Go for educational purpose.

A place to store my toy linux-security modules.

high performance key value database written in Go. Deprecated. Use robaho/leveldb

Liquid State Machines in Python and NEST

My local AppArmor profiles for apps that can use those

Hardens eBPF tools against privileged attackers via policy-based access controls

eBPF Security Monitoring and Sandboxing Agent Based on Aya

Kernel-Enforced Install-Time Policies (KEIP): An eBPF/LSM based security tool that detects and blocks malicious network activity during pip install.Kernel-Enforced Install-Time Policies (KEIP): An eBPF/LSM based security tool that detects and blocks malicious network activity during pip install

micromize is a security hardening tool designed to detect and break the post-exploit kill chain for containerized applications, leveraging BPF LSM.

Bigtable but smol