Sandboxing
Step 2: Prep chroot for yum Usage
Installing the release package (e.g., centos-release, redhat-release) into the chroot will let yum work:
# rpm -Uvh --nodeps --root=/chroot/ centos-release-5-1.0.el5.centos.1.x86_64.rpm
Step 3: Install into the chroot
The RPM also installs the software into the chroot, but yum will handle dependencies and make things much simpler:
# yum --installroot=/chroot/install bash yum vim-minimal
At a minimum, I recommend a shell (bash), yum to install software, and the vim editor to modify files in the chroot.
Step 4: Network Configuration Files
If you want to access the network from within the chroot, you need a resolv.conf file (lets applications know where your DNS servers are to be found) and:
# mkdir /chroot/etc/ # mkdir /chroot/etc/sysconfig # cp /etc/resolv.conf /chroot/etc/ # cp /etc/sysconfig/network /chroot/etc/sysconfig/
« Previous 1 2 3 4 Next »
Read full article as PDF:
Sandboxing.pdf (812.63 kB)Tag Cloud
News
-
An Even Smaller Raspberry Pi
The Raspberry Pi Foundation has announced an even smaller version of the tiny computer that will fit into a DIMM slot.
-
Newly Discovered Android Vulnerability Causes Privilege Escalation
A new class of problems lets a malicious app pre-configure an invisible privilege update.
-
Facebook Rolls Out New PHP-like Programming Language
New Hack language adds static typing and other conveniences.
-
Fedora Announces Innovative Crytography Policy System
New crypto policy system will offer easier configuration and more uniform security.
-
Shuttleworth Calls for Declarative Firmware
Ubuntu founder denounces insecurity in proprietary, close-source software blobs.
-
New TLS Attack Takes the S out of HTTPS
Vulnerability affects many Linux web servers
-
Munich Adopts Kolab
The Bavarian capital shuns Microsoft, Google, and other alternatives to implement an open source groupware solution.
-
Canonical Announces Ubuntu Smartphones
Phone vendor partnerships bring Mark Shuttleworth's dream of Ubuntu on a phone a step closer to reality.
-
Piviti Seeks Funding
Donors will get to vote on new features for the free video editor.
-
Debian Tech Committee Votes for systemd
Debian project puts init out to pasture and says no to Ubuntu's Upstart.