Use RLBox for sandboxing third-party libraries
We like to start playing with RLBox (https://github.com/PLSysSec/rlbox_sandboxing_api/) as a hardening tool for sandboxing third-party library code. This ticket is the parent ticket for all our efforts.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information