Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Firejail
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
el muchacho
Tux's lil' helper
Tux's lil' helper


Joined: 26 Mar 2015
Posts: 77

PostPosted: Mon Apr 20, 2015 2:42 pm    Post subject: Firejail Reply with quote

I'm quite surprise to see that a search for "Firejail" on this forum didn't produce any result.

For those who are into the security aspect of Gentoo, this is a great tool to look at. This is not in the official portage tree but in the overlays.

What it basically does is, allows you to run any program in a sandbox with:

- the seccomp you decide
- the capabilities you decide
- the chroot environment you decied
- the linux namespace you decide (separate PID tree, separate network stack if you wish, and a few others).

I find it much easier than AppArmor or other tools which do not even cover all those aspects at the same time.

All that config is very simple. In a config file, you put one-liners which will blacklist/whitelist/make read-only/make invisible the directories/files/system calls you wish to avoid:


Code:
# system directories
blacklist /sbin
blacklist /usr/sbin

# system management
blacklist ${PATH}/su
blacklist ${PATH}/sudo
blacklist ${PATH}/strace

seccomp.drop fork
seccomp.keep read


More info: https://l3net.wordpress.com/projects/firejail/
Back to top
View user's profile Send private message
charles17
Advocate
Advocate


Joined: 02 Mar 2008
Posts: 2583

PostPosted: Mon Apr 20, 2015 3:38 pm    Post subject: Reply with quote

Thanks for the info. http://gpo.zugaina.org/Search?search=firejail
Version 0.9.24 seems not to be in the overlays yet.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum