Sandbox using SELinux etc.

From	Victor Porton <porton@narod.ru>
Newsgroups	comp.os.linux.security
Subject	Sandbox using SELinux etc.
Date	2014-01-07 17:44 +0200
Organization	Aioe.org NNTP Server
Message-ID	<lah7di$vjh$1@speranza.aioe.org> (permalink)

Show all headers | View raw

I am studying SELinux.

I want to write a sandbox binary which would (essentially) disallow a 
program started from it to open new files (and possibly restrict its access 
to network).

Should I implement it not only for SELinux but also for AppArmor and Tomoyo?

-- 
Victor Porton - http://portonvictor.org

Back to comp.os.linux.security | Previous | Next | Find similar

Thread

Sandbox using SELinux etc. Victor Porton <porton@narod.ru> - 2014-01-07 17:44 +0200

csiph-web