Sandboxing
Step 2: Prep chroot for yum Usage
Installing the release package (e.g., centos-release, redhat-release) into the chroot will let yum work:
# rpm -Uvh --nodeps --root=/chroot/ centos-release-5-1.0.el5.centos.1.x86_64.rpm
Step 3: Install into the chroot
The RPM also installs the software into the chroot, but yum will handle dependencies and make things much simpler:
# yum --installroot=/chroot/install bash yum vim-minimal
At a minimum, I recommend a shell (bash), yum to install software, and the vim editor to modify files in the chroot.
Step 4: Network Configuration Files
If you want to access the network from within the chroot, you need a resolv.conf file (lets applications know where your DNS servers are to be found) and:
# mkdir /chroot/etc/ # mkdir /chroot/etc/sysconfig # cp /etc/resolv.conf /chroot/etc/ # cp /etc/sysconfig/network /chroot/etc/sysconfig/
« Previous 1 2 3 4 Next »
Read full article as PDF:
Sandboxing.pdf (812.63 kB)Tag Cloud
News
-
KDE Announces Software Compilation 4.13
New release comes with better semantic search and improvements to Kontact.
-
Coverity: Open Source Code has Fewer Defects
Annual code quality report shows FOSS is more secure at all project size levels.
-
An Even Smaller Raspberry Pi
The Raspberry Pi Foundation has announced an even smaller version of the tiny computer that will fit into a DIMM slot.
-
Freaky Privilege Escalation Attack
A new class of problems lets a malicious app pre-configure an invisible privilege update.
-
Facebook Rolls Out New PHP-like Programming Language
New Hack language adds static typing and other conveniences.
-
Fedora Announces Innovative Crytography Policy System
New crypto policy system will offer easier configuration and more uniform security.
-
Shuttleworth Calls for Declarative Firmware
Ubuntu founder denounces insecurity in proprietary, close-source software blobs.
-
New TLS Attack Takes the S out of HTTPS
Vulnerability affects many Linux web servers
-
Munich Adopts Kolab
The Bavarian capital shuns Microsoft, Google, and other alternatives to implement an open source groupware solution.
-
Canonical Announces Ubuntu Smartphones
Phone vendor partnerships bring Mark Shuttleworth's dream of Ubuntu on a phone a step closer to reality.