Mbox Usage 1: Installing packages without rootUsage 2: Running unknown binary safelyUsage 3: Checkpointing filesystemUsage 4: Build/development environmentUsage 5: Profile-based sandbox 轻量级的沙箱机制

程序名称:Mbox Usage 1: Installing packages without rootUsage 2: Running unknown binary safelyUsage 3: Checkpointing filesystemUsage 4: Build/development environmentUsage 5: Profile-based sandbox

授权协议: 未知

操作系统: Linux

开发语言: C/C++

Mbox Usage 1: Installing packages without rootUsage 2: Running unknown binary safelyUsage 3: Checkpointing filesystemUsage 4: Build/development environmentUsage 5: Profile-based sandbox 介绍

Mbox 是一个轻量级的沙箱机制,任何用户可在没人特权的操作系统内执行程序。

示例:

Usage 1: Installing packages without root

 $ mbox -R -- apt-get install git  (-R: emulate a fakeroot environment)

Usage 2: Running unknown binary safely

 $ mbox -n -- wget google.com  (-n: disable remote network accesses)

Usage 3: Checkpointing filesystem

 $ mbox -i -- sh  (-i: enable interactive commit-mode)

Usage 4: Build/development environment

 $ mbox -r outdir -- make  (-r dir: specify a sandbox filesystem)

Usage 5: Profile-based sandbox

 $ mbox -p build.prof -- ./configure  (-p prof: enable profile-based policy)


## build.prof[fs]
    allow: .    hide: ~

Mbox Usage 1: Installing packages without rootUsage 2: Running unknown binary safelyUsage 3: Checkpointing filesystemUsage 4: Build/development environmentUsage 5: Profile-based sandbox 官网

http://pdos.csail.mit.edu/mbox/

版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 [email protected] 举报,一经查实,本站将立刻删除。

相关推荐