3 ms·
How do you bind a /tmp/empty to /home/$USER with unveil, so that you can see and capture the files some program creates?
by ori_b 6y ago
How do you bind a /tmp/empty to /home/$USER with unveil, so that you can see and capture the files some program creates?
- gbrown_ 6y agoSorry I don't quite grok your comment. It sounds like a bind mount so I'm unsure how it relates to unveil or chroot?
- ori_b 6y agoChroot is more or less a bind mount over /. Bind mounts generalize chroot. Unveil does not, and therefore does not allow you to provide arbitrary views of the file system. It's useful for other reasons. On OpenBSD, a full web browser compromise does not lead to full file system access.