I just made my "sbtar" project public. It is an experimental implementation of tar (currently supporting extract mode only) that uses various operating systems' sandboxing technologies to isolate itself before parsing and extracting a tar file. It currently supports FreeBSD, OpenBSD, and macOS.

I wrote it mainly to help myself understand Rust and its foreign function interface APIs and to safely extract backups on my NAS. If you're interested, it can be found on GitHub and GitLab: https://github.com/stephen-fox/sbtar

GitHub - stephen-fox/sbtar: sbtar enters a sandbox and extracts a tar from standard input into a directory.

sbtar enters a sandbox and extracts a tar from standard input into a directory. - stephen-fox/sbtar

GitHub
@stephen0x2dfox Maximum irony would be if this overtook tar, and turns out rust compiler is compromised in bootstrapped compiler attack
@dagelf That would be very unfortunate haha