4 ms·

An option to run the potentially harmful script in a rootless container, then dump filesystem diffs, audit events, etc...might be helpful. I get containers are

by tyingq 1y ago

An option to run the potentially harmful script in a rootless container, then dump filesystem diffs, audit events, etc...might be helpful. I get containers aren't perfect isolation, but...

eptcyka 1y ago
Could do it in a VM too.
ilyagr 1y ago
One option is https://github.com/binpash/try https://github.com/binpash/try It is Linux-only, though.