1 |
On 02/11/14 01:36, Jason A. Donenfeld wrote: |
2 |
> Hey folks, |
3 |
> |
4 |
> Late night clicking-while-drooling, I came across something a few |
5 |
> minutes ago that mildly piqued my interest -- mbox |
6 |
> <http://pdos.csail.mit.edu/mbox/>. It's a sandbox that uses a |
7 |
> combination of ptrace and seccomp bpf; neither ours nor exherbo's uses |
8 |
> both of these together. The killer feature, for us, that's motivating |
9 |
> me to write to this list, is that it creates a "shadow file system", |
10 |
> and then has the option to commit the changes of that file system to |
11 |
> the real file system, piece by piece, when the process is done. It |
12 |
> made me think of some discussions we had at FOSDEM about Portage |
13 |
> evolution and whatnot. I haven't looked at this tool past an initial |
14 |
> glance, but it does look like interesting food for thought. |
15 |
|
16 |
Sounds interesting, especially the "without special privileges" bit... |
17 |
|
18 |
/haubi/ |