Re: Sandboxing at runtime

2020-07-23 Thread James Browning via devel
On Thu, Jul 23, 2020, 3:50 PM Bernd Zeimetz via devel wrote: For Redhat based distros it might make sense to create a selinux policy > (in case there is none yet!?). > If I understand correctly Gentoo claims to have had a gpsd selinux policy for the last 2-1/2 years. I did not look for older inf

Re: Sandboxing at runtime

2020-07-23 Thread Bernd Zeimetz via devel
Hi, On 7/22/20 6:20 AM, Sanjeev Gupta wrote: > (I am cc:ing both lists, as I think the groups overlap, and both have > the seame concerns) > > https://blog.cloudflare.com/sandboxing-in-linux-with-zero-lines-of-code/ > > A choice of either a dynamic library (with LD_PRELOAD) or running it > unde