sandbox(7) [osx man page]

SANDBOX(7)					       BSD Miscellaneous Information Manual						SANDBOX(7)

NAME

     sandbox -- overview of the sandbox facility

SYNOPSIS

     #include <sandbox.h>

DESCRIPTION

     The sandbox facility allows applications to voluntarily restrict their access to operating system resources.  This safety mechanism is
     intended to limit potential damage in the event that a vulnerability is exploited.  It is not a replacement for other operating system access
     controls.

     New processes inherit the sandbox of their parent.  Restrictions are generally enforced upon acquisition of operating system resources only.
     For example, if file system writes are restricted, an application will not be able to open(2) a file for writing.	However, if the applica-
     tion already has a file descriptor opened for writing, it may use that file descriptor regardless of restrictions.

SEE ALSO

     sandbox-exec(1), sandbox_init(3), sandboxd(8)

Mac OS X							 January 29, 2010							  Mac OS X

sandbox.conf(5) 					    Linux System Administration 					   sandbox.conf(5)

NAME

       sandbox.conf - user config file for the SELinux sandbox

DESCRIPTION

       When  running sandbox with the -C argument, it will be confined using control groups and a system administrator can specify how the sandbox
       is confined.

       Everything after "#" is ignored, as are empty lines.  All arguments should be separated by and equals sign ("=").

       These keywords are allowed.

	      NAME   The name of the sandbox control group.  Default is "sandbox".

	      CPUAFFINITY
		     Which cpus to assign sandbox to.  The default is ALL, but users can specify a comma-separated list with dashes ("-") to  rep-
		     resent ranges.  Ex: 0-2,5

	      MEMUSAGE
		     How  much	memory to allow sandbox to use.  The default is 80%.  Users can specify either a percentage or a value in the form
		     of a number followed by one of the suffixes K, M, G to denote kilobytes, megabytes or gigabytes  respectively.   Ex:  50%	or
		     100M

	      CPUUSAGE
		     Percentage  of  cpu sandbox should be allowed to use.  The default is 80%.  Specify a value followed by a percent sign ("%").
		     Ex: 50%

SEE ALSO

       sandbox(8)

AUTHOR

       This manual page was written by Thomas Liu <tliu@fedoraproject.org>

sandbox.conf							     June 2010							   sandbox.conf(5)