7 More Discussions You Might Find Interesting
1. Linux
I have installed user-mode linux kernel in Ubuntu 10.10 with the help of Synaptic package manager.
But I'm not getting how to run it.
If we install it manually, we've to run it using the executable binary file.
But here, I'm unable to locate any such file.
Please help....
Thanking You....
... (0 Replies)
Discussion started by: rohitadeshmukh1
0 Replies
2. Programming
Hi,
I'm writing a monitor program that can be notified once a process makes an execve system call and then stop that process for examining before it starts to run the new code. I know I can ptrace a process to achieve this, but I do not want to ptrace every process in the system. Is it possible?... (1 Reply)
Discussion started by: aaron.lwe
1 Replies
3. SuSE
Hi All,
I used to have my suse linux(VM) server in graphic mode but not anymore since morning. I cant rolback since i loose somuch work. Any idea how to it back to normal. Thanks (6 Replies)
Discussion started by: s_linux
6 Replies
4. UNIX for Dummies Questions & Answers
hello ppl, someone must be able to help with this --> I have an old NCR tower 32 with an ADDS terminal running a unix version 020102 (Im not sure if thats correct but its unix for sure). I have no user names and no passwords and need to login to read a tape. Is there any way to do that? I hear... (3 Replies)
Discussion started by: orestis
3 Replies
5. UNIX for Advanced & Expert Users
Hi guys,
I am working with User Mode Linux (UML) because I have one equipment only and I would like to use it with several servers (web,Mysql,etc) on a virtual system (virtual localhost) using the equipment for personal works at the same time.
My system is:
Sofware:
Debian Sarge 3.1 installed... (0 Replies)
Discussion started by: tiemars
0 Replies
6. UNIX for Advanced & Expert Users
hi everybody,
i am trying install user mode linux in Linux kernel 2.6.11(Fedora core)
I have open suse file system image for user mode linux n UML binary
uml-release-2.6.13.4-bs5.tar.
I am doing following steps to install it.
in root #mkdir uml
in uml directory(empty now) i pasted my... (2 Replies)
Discussion started by: sriram.ec
2 Replies
7. Solaris
Just got a solaris 8 blade 150 box with no users, only a root account. no one seems to know the password. I'd like to add one user. So I booted into single user mode via cdrom and added one. Can't seem to login using the new account, though. Here's what I'm using:
# useradd -d /tmp/"user" -m... (1 Reply)
Discussion started by: ECBROWN
1 Replies
LEARN ABOUT CENTOS
sandbox
SANDBOX(8) User Commands SANDBOX(8)
NAME
sandbox - Run cmd under an SELinux sandbox
SYNOPSIS
sandbox [-C] [-c] [-s] [ -d DPI ] [-l level ] [[-M | -X] -H homedir -T tempdir ] [-I includefile ] [ -W windowmanager ] [ -w windowsize ]
[[-i file ]...] [ -t type ] cmd
sandbox [-C] [-c] [-s] [ -d DPI ] [-l level ] [[-M | -X] -H homedir -T tempdir ] [-I includefile ] [ -W windowmanager ] [ -w windowsize ]
[[-i file ]...] [ -t type ] -S
DESCRIPTION
Run the cmd application within a tightly confined SELinux domain. The default sandbox domain only allows applications the ability to read
and write stdin, stdout and any other file descriptors handed to it. It is not allowed to open any other files. The -M option will mount
an alternate homedir and tmpdir to be used by the sandbox.
If you have the policycoreutils-sandbox package installed, you can use the -X option and the -M option. sandbox -X allows you to run X
applications within a sandbox. These applications will start up their own X Server and create a temporary home directory and /tmp. The
default SELinux policy does not allow any capabilities or network access. It also prevents all access to the users other processes and
files. Files specified on the command that are in the home directory or /tmp will be copied into the sandbox directories.
If directories are specified with -H or -T the directory will have its context modified with chcon(1) unless a level is specified with -l.
If the MLS/MCS security level is specified, the user is responsible to set the correct labels.
-h --help
display usage message
-H --homedir
Use alternate homedir to mount over your home directory. Defaults to temporary. Requires -X or -M.
-i --include
Copy this file into the appropriate temporary sandbox directory. Command can be repeated.
-I --includefile
Copy all files listed in inputfile into the appropriate temporary sandbox directories.
-l --level
Specify the MLS/MCS Security Level to run the sandbox with. Defaults to random.
-M --mount
Create a Sandbox with temporary files for $HOME and /tmp.
-s --shred
Shred temporary files created in $HOME and /tmp, before deleting.
-t --type
Use alternate sandbox type, defaults to sandbox_t or sandbox_x_t for -X.
Examples:
sandbox_t - No X, No Network Access, No Open, read/write on passed in file descriptors.
sandbox_min_t - No Network Access
sandbox_x_t - Printer Ports
sandbox_web_t - Ports required for web browsing
sandbox_net_t - All network ports
-T --tmpdir
Use alternate temporary directory to mount on /tmp. Defaults to tmpfs. Requires -X or -M.
-S --session
Run a full desktop session, Requires level, and home and tmpdir.
-w --windowsize
Specifies the windowsize when creating an X based Sandbox. The default windowsize is 1000x700.
-W --windowmanager
Select alternative window manager to run within sandbox -X. Default to /usr/bin/matchbox-window-manager.
-X Create an X based Sandbox for gui apps, temporary files for $HOME and /tmp, secondary Xserver, defaults to sandbox_x_t
-d --dpi
Set the DPI value for the sandbox X Server. Defaults to the current X Sever DPI.
-c --cgroups
Use control groups to control this copy of sandbox. Specify parameters in /etc/sysconfig/sandbox. Max memory usage and cpu usage
are to be specified in percent. You can specify which CPUs to use by numbering them 0,1,2... etc.
-C --capabilities Use capabilities within the
sandbox. By default applications executed within the sandbox will not be allowed to use capabilities (setuid apps), with the -C
flag, you can use programs requiring capabilities.
SEE ALSO
runcon(1), seunshare(8), selinux(8)
AUTHOR
This manual page was written by Dan Walsh <dwalsh@redhat.com> and Thomas Liu <tliu@fedoraproject.org>
sandbox May 2010 SANDBOX(8)