RepoMirrors/selinux
1
0
Fork 0
mirror of https://github.com/SELinuxProject/selinux synced 2024-12-21 13:40:06 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,582 Commits 4 Branches 723 Tags 22 MiB
ace9ec17ff
Commit Graph

3 Commits

Author SHA1 Message Date
Vit Mojzis
535dc2479b sandbox: Add examples to man pages 
While at it, remove trailing whitespaces.

Signed-off-by: Vit Mojzis <vmojzis@redhat.com>
Acked-by: Petr Lautrbach <lautrbach@redhat.com>
 2023-06-08 15:10:08 -04:00
Petr Lautrbach
ecfcb1d6a8 sandbox: Use temporary directory for XDG_RUNTIME_DIR 
XDG_RUNTIME_DIR (/run/user/$UID) is used for user-specific data files
such as sockets, named pipes and so on. Therefore, it should not be
available to sandboxed processes.

Usage:
    # ls -a $XDG_RUNTIME_DIR
    .  ..  bus  pipewire-0  systemd
    # sandbox -R /root/sandbox/user -- sh -c "ls -a $XDG_RUNTIME_DIR"
    .  ..

Signed-off-by: Petr Lautrbach <plautrba@redhat.com>
Acked-by: James Carter <jwcart2@gmail.com>
 2022-11-09 07:49:34 -05:00
Stephen Smalley
97bf196c89 Move policycoreutils/sandbox to sandbox. 
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
 2016-11-16 11:19:50 -05:00