Disable sandbox via shared-library hijacking

Supported sandboxes:

• FreeBSD capsicum
• OpenBSD pledge
• Illumos privileges
• Linux
  • capabilities
  • landlock
  • prctl
  • seccomp
  • SELinux

Usage

make
LD_PRELOAD=$PWD/$(uname -s)/libunsandbox.so program [options] [arguments]

See ld.so(8) manpage for alternatives to LD_PRELOAD

BUGS / Limitations

• Doesn't support statically compiled binaries
• Doesn't support setuid/setgid binaries
• Doesn't work on HardenedBSD unless the hardening.harden_rtld sysctl is set to zero