OS-Level Sandboxing in C

I found the slides and notes that I had prepared for a workshop I gave last year and decided to write a post about that topic. Here we will explore how we can sandbox a process to protect it from memory-corruption vulnerabilities and malicious code injection. To be honest, I’m not really fluent in Windows development, so I used official documentation and then just tested the code. I’m not sure if the best practices were used there, but the code was tested and it works. We will look at the techniques in 3 different worlds: Linux, Windows, and FreeBSD. The C23 standard is used in the examples.