19 Mar
2021
19 Mar
'21
5:26 p.m.
On Tue, Mar 16, 2021 at 09:42:51PM +0100, Mickaël Salaün wrote:
From: Mickaël Salaün mic@linux.microsoft.com
Add a basic sandbox tool to launch a command which can only access a list of file hierarchies in a read-only or read-write way.
Cc: James Morris jmorris@namei.org Cc: Kees Cook keescook@chromium.org Cc: Serge E. Hallyn serge@hallyn.com Signed-off-by: Mickaël Salaün mic@linux.microsoft.com
I'm very happy to see any example!
Reviewed-by: Kees Cook keescook@chromium.org
--
Kees Cook