[task #15701] Sandboxing the execution of the project

[Mohammad Akhlaghi]

Follow-up Comment #9, task #15701 (project reproduce):

This is interesting Mohammad-reza, thanks ;-).

I had a fast look in its How Jail works
<http://www.jmcresearch.com/projects/jail/design.html> page and noticed this:
"Jail is a login tool. Jail works as a wrapper to the user shell, so when the
user log in the machine Jail is launched, and the chrooted environment is
activated. Then, Jail execs the real user shell, so he gets his session in the
server."

If I understand correctly, it requires a log-in by the user and wraps over
their shell. We can't force users to do this! A principle of Maneage is to
have no effect on the host ;-).

You also mentioned one-time engagement of root privilege, which we also can't
assume in Maneage.

Please correct me if I am wrong ;-).

    _______________________________________________________

Reply to this item at:

  <https://savannah.nongnu.org/task/?15701>

_______________________________________________
  Message sent via Savannah
  https://savannah.nongnu.org/