diff options
| author | Sam Thursfield <sam@afuera.me.uk> | 2016-02-20 15:54:53 +0000 |
|---|---|---|
| committer | Sam Thursfield <sam@afuera.me.uk> | 2016-02-20 15:54:53 +0000 |
| commit | c7e99b2b8e000ba5de6b127d70ec4b2bd5d5f801 (patch) | |
| tree | 4cd8827f1336a366f01ff692f5c7e4f565d383e0 | |
| parent | fd9d4a41b7a603d03a526ea40e17cd3512466e9f (diff) | |
| download | sandboxlib-c7e99b2b8e000ba5de6b127d70ec4b2bd5d5f801.tar.gz | |
README: Link to more things
| -rw-r--r-- | README.rst | 22 |
1 files changed, 22 insertions, 0 deletions
@@ -39,12 +39,14 @@ Current backends Possible future backends ======================== +- Bubblewrap_ - Firejail_ - runC_ - `Security Enhanced Linux`_ (SELinux): see https://danwalsh.livejournal.com/28545.html - systemd-nspawn_ - Warden_ +.. _Bubblewrap: https://github.com/alexlarsson/bubblewrap .. _Firejail: https://github.com/netblue30/firejail/ .. _runC: http://runc.io/ .. _Security Enhanced Linux: http://selinuxproject.org/page/Main_Page @@ -57,6 +59,19 @@ Relationship to other projects Sandboxing ---------- +Fakeroot / Pseudo +~~~~~~~~~~~~~~~~~ + +Fakeroot_ and the comparable tool Psuedo_ operate by using LD_PRELOAD_ to +intercept filesystem operations from processes. If any of these processes +require special privileges, it "fakes" the operation by recording it in +a database, and rewriting query responses so that the operation appears to +have taken place. They are widely used in operating system build tools. + +.. _Fakeroot: https://fakeroot.alioth.debian.org/ +.. _Pseudo: https://www.yoctoproject.org/tools-resources/projects/pseudo +.. _LD_PRELOAD: https://stackoverflow.com/questions/426230/what-is-the-ld-preload-trick + libsandbox / pysandbox ~~~~~~~~~~~~~~~~~~~~~~ @@ -66,6 +81,13 @@ and dropping certain privileges. .. _libsandbox: https://github.com/openjudge/sandbox +MBox +~~~~ + +MBox_ implements sandboxing using LD_PRELOAD_, in a similar way to Fakeroot_. + +.. _MBox: https://pdos.csail.mit.edu/archive/mbox/ + PRoot ~~~~~ |