4 ms·
Don't get me wrong, I think it's great linux gets something like this. But, eh... http://en.wikipedia.org/wiki/FreeBSD_jail http://en.wikipedia.org/wiki/FreeBS
by bradfordw 17y ago
Don't get me wrong, I think it's great linux gets something like this. But, eh... http://en.wikipedia.org/wiki/FreeBSD_jail http://en.wikipedia.org/wiki/FreeBSD_jail c'mon! It's been done! Well!
- singlow 17y agoI think the point is that it works kind of like Jail, but with the ease of use of sudo. Sometimes you might have to grant access to additional resources, but under many circumstances you can execute untrusted executables or work with untrusted data _without_ setting up a jail for each instance. If you want to have a process that runs constantly in its own environment without even knowing that it is being crippled, jail may be the better choice. But for spontaneous spawning of suspicious scripts, this seems like a great tool.
- ajross 17y agoExactly. This is a dynamic tool, a jail is a statically configured thing that generally needs architecture support from the jailed app to work. And what's with the BSD vs. Linux bit? FreeBSD and Linux are, in fact, precisely the two launch platforms for this tool. I don't see any favoritism at all...