Hi guys, I have a specific question .
For example when a command will be run, first the system will check if the user have the required access to run it, and then the program can access to the files if it is allowed.
So my question is: is it possible for example to run a program just before this right access check ? Basically I would like to code an additional security layer .
Is it possible to do this ?
Technical question about permission access
Message
- Fulgurance
- Veteran
- Posts: 1287
- Joined: Wed Feb 15, 2017 4:31 pm
- Contact:
Technical question about permission access
My actual project: https://github.com/Fulgurance/ISM
Ingenius Software Manager is a tool to build and manage a Linux system from scratch.
It will able to manage a linux installation just with a given path to the futur root path
Ingenius Software Manager is a tool to build and manage a Linux system from scratch.
It will able to manage a linux installation just with a given path to the futur root path
Something along the lines of sys-apps/sandbox , perhaps? You can check the README file for ideas.
If sandbox doesn't meet all your needs, you'll have to write, test and debug a lot of low-level software...
Code: Select all
/usr/share/doc/sandbox-2.39/README.md.bz2
Specific questions are the best kind of questions 
No idea about that "running code before checking permissions on your program" part, but it seems to me that you're looking for stuff like selinux or apparmor. Or, yes, sandbox, though userspace sandbox must be inferior to an in-kernel enforcer.
No idea about that "running code before checking permissions on your program" part, but it seems to me that you're looking for stuff like selinux or apparmor. Or, yes, sandbox, though userspace sandbox must be inferior to an in-kernel enforcer.
[topic=1152524]Make Pipewire a system service[/topic]