This is the Linux app named nono whose latest release can be downloaded as nono-v0.15.0-x86_64-apple-darwin.tar.gz. It can be run online in the free hosting provider OnWorks for workstations.
Download and run online this app named nono with OnWorks for free.
Follow these instructions in order to run this app:
- 1. Downloaded this application in your PC.
- 2. Enter in our file manager https://www.onworks.net/myfiles.php?username=XXXXX with the username that you want.
- 3. Upload this application in such filemanager.
- 4. Start the OnWorks Linux online or Windows online emulator or MACOS online emulator from this website.
- 5. From the OnWorks Linux OS you have just started, goto our file manager https://www.onworks.net/myfiles.php?username=XXXXX with the username that you want.
- 6. Download the application, install it and run it.
SCREENSHOTS
Ad
nono
DESCRIPTION
nono is an open-source, kernel-enforced capability shell designed to safely run AI agents and other untrusted processes under strict operating system controls. The project addresses a growing security concern: modern coding agents typically execute with full user permissions, which means they can potentially read sensitive files, modify system configurations, or exfiltrate credentials if compromised. nono solves this by applying default-deny sandboxing at the kernel level using technologies such as Landlock on Linux and Seatbelt on macOS, making unauthorized actions structurally impossible rather than merely discouraged. Unlike container-based approaches, the tool is intentionally lightweight and can wrap any command-line process without requiring images, VMs, or complex infrastructure. The system emphasizes capability-based security, where processes are granted only the exact filesystem paths and network access they need, and nothing more.
Features
- Kernel-enforced sandbox using Landlock and Seatbelt
- Default-deny filesystem and network policy model
- Agent-agnostic wrapper for any CLI process
- Lightweight alternative to containers and VMs
- Inherited restrictions across subprocesses
- Sensitive path protection and command blocking
Programming Language
Rust
Categories
This is an application that can also be fetched from https://sourceforge.net/projects/nono.mirror/. It has been hosted in OnWorks in order to be run online in an easiest way from one of our free Operative Systems.
