selinux/sandbox
Petr Lautrbach ecfcb1d6a8 sandbox: Use temporary directory for XDG_RUNTIME_DIR
XDG_RUNTIME_DIR (/run/user/$UID) is used for user-specific data files
such as sockets, named pipes and so on. Therefore, it should not be
available to sandboxed processes.

Usage:
    # ls -a $XDG_RUNTIME_DIR
    .  ..  bus  pipewire-0  systemd
    # sandbox -R /root/sandbox/user -- sh -c "ls -a $XDG_RUNTIME_DIR"
    .  ..

Signed-off-by: Petr Lautrbach <plautrba@redhat.com>
Acked-by: James Carter <jwcart2@gmail.com>
2022-11-09 07:49:34 -05:00
..
po Update translations 2022-10-05 08:13:26 -04:00
ru Add man pages translation by Olesya Gerasimenko 2019-01-28 12:03:57 +01:00
.gitignore Move policycoreutils/sandbox to sandbox. 2016-11-16 11:19:50 -05:00
LICENSE docs: provide a top level LICENSE file 2022-10-05 08:20:38 -04:00
Makefile Split po/ translation files into the relevant sub-directories 2022-04-06 10:52:41 +02:00
sandbox sandbox: Use temporary directory for XDG_RUNTIME_DIR 2022-11-09 07:49:34 -05:00
sandbox.5 Move policycoreutils/sandbox to sandbox. 2016-11-16 11:19:50 -05:00
sandbox.8 sandbox: Use temporary directory for XDG_RUNTIME_DIR 2022-11-09 07:49:34 -05:00
sandbox.conf Move policycoreutils/sandbox to sandbox. 2016-11-16 11:19:50 -05:00
sandbox.config Move policycoreutils/sandbox to sandbox. 2016-11-16 11:19:50 -05:00
sandbox.init Move policycoreutils/sandbox to sandbox. 2016-11-16 11:19:50 -05:00
sandboxX.sh Move policycoreutils/sandbox to sandbox. 2016-11-16 11:19:50 -05:00
seunshare.8 sandbox: Use temporary directory for XDG_RUNTIME_DIR 2022-11-09 07:49:34 -05:00
seunshare.c sandbox: Use temporary directory for XDG_RUNTIME_DIR 2022-11-09 07:49:34 -05:00
start Always use /usr/bin/python3 in Python scripts 2019-02-20 16:43:27 +01:00
test_sandbox.py sandbox: make test not fail on systems without SELinux 2016-11-17 16:44:57 -05:00
VERSION Update VERSIONs to 3.4 for release. 2022-05-18 16:51:03 +02:00