3 ms·
> Run arbitrary binaries that you don't trust safely (maybe you downloaded it from the internet). I don't think sandboxing is an appropriate solutionto this. E
by gravypod 10y ago
> Run arbitrary binaries that you don't trust safely (maybe you downloaded it from the internet).
I don't think sandboxing is an appropriate solutionto this. Especially just filesystem sandboxing. This does nothing to prevent security exploits via any means.
Also how does this compare to chroot?
- treve 10y agoIt definitely doesn't make it safe, but it does allow you to run a binary and see what it would do to your filesystem, without actually doing it; which is pretty neat! chroot is completely different because it completely isolates a process from the rest of the filesystem. This is more like, well, a sandbox or overlay.
- Mic92 10y agoit could hardened it with seccomp filter.