3 ms·
Do you have any write-ups on how one would accomplish this SELinux sandbox for your browser? Thanks!
by rufugee 13y ago
Do you have any write-ups on how one would accomplish this SELinux sandbox for your browser? Thanks!
- betterunix 13y agohttp://danwalsh.livejournal.com/31146.html http://danwalsh.livejournal.com/31146.html One very simple way to get a sandboxed browser is to run this command (my irony meter is going off the charts here): sandbox -X -t sandbox_web_t firefox However, that will prevent any persistence between sessions, so you probably want to do something more like this: sandbox -X -H /path/to/some/directory -t sandbox_web_t firefox My recommendation is that you read the man pages and experiment a bit.
- dredmorbius 13y agomy irony meter is going off the charts here Nothing wrong with showing commands and examples to be used. It's the cut-and-paste aspect that's an issue. My first action was to search through my package repos (Debian) to see if that sandbox command is known to my packaging system (it's not, hrm...).