Comment on Mbox – A lightweight sandboxing mechanismparentComments−dobbsbob12yhttp://pdos.csail.mit.edu/mbox/mbox-latest.amd64.deb doesn't exist btw.So far mbox is pretty awesome. Installed a bunch of rootless memory scrapers with a regular user account to see what it can do. Another, ephemeral sandbox I use is PrivExec http://www.onarlioglu.com/privexec/
Comments
http://pdos.csail.mit.edu/mbox/mbox-latest.amd64.deb doesn't exist btw.
So far mbox is pretty awesome. Installed a bunch of rootless memory scrapers with a regular user account to see what it can do. Another, ephemeral sandbox I use is PrivExec http://www.onarlioglu.com/privexec/