The tag has no wiki summary.

learn more… | top users | synonyms

-3
votes
1answer
125 views

Difference between packages and Docker images [closed]

I understand PPAs but Docker is new to me. How are Docker and Dockerfiles different from Ubuntu's Personal Package Archives (PPA), in terms of package management?
2
votes
2answers
104 views

Dividing sets of services on a single server

A group which I'm part of has grown and is about to move from using DigitalOcean VPSes to a single colocated server. At this point, we don't have a need to distribute our service very highly. This ...
1
vote
0answers
181 views

OSX chrooted sftp alternative with sandbox-exec

As a follow up to this stackoverflow question, I am trying to use sandbox-exec as an alternative to chrooted sftp with the internal-sftp method. The sshd config is: Subsystem sftp ...
-1
votes
2answers
55 views

Sandbox any file access on linux [closed]

Is there a program that could sandbox any file access from another program in LInux? The equivalent of what i want in windows are: Sandboxie (http://en.wikipedia.org/wiki/Sandboxie) I intended to ...
0
votes
1answer
52 views

Sandboxing Web applications

I want to sandbox multiple web applications hosted on the same server. To test my scenario I configure an Apache web server on a local machine with web apps hosted on that machines. One of the web ...
1
vote
1answer
618 views

How to Copy Files from a Isolated VM ona ESX Server

We have a Sandbox built on a ESXi(5.0) server and have a VM((A Domain Controller) on it. I want to copy the files on that VM to my workstation. Is there anyway to do that? I can browse the data ...
1
vote
2answers
80 views

DNS Service not running on a Sandboxed and alienated single Domain controller

we were trying to created a sandboxed test environment; so we promoted a member server to a domain controller and then shut it down moved it to a sandboxed netwrok and cleaned up metadata. Everything ...
1
vote
3answers
4k views

isolate application and check what packets it is sending over the internet

I am not sure that this sort of question is appropriate here, so forgive me if I'm wrong. Here is a problem: I want to see what a specific program is sending to the internet, but the thing is that on ...
4
votes
5answers
778 views

NTFS: Deny all permissions for all files, except where explicitly added

I'm running a sandboxed application as a local user. I now want to deny almost all file system permissions for this user to secure the system, except for a few working folders and some system DLLs ...
2
votes
1answer
457 views

Limiting a process' network access on Linux?

I've been researching how to sandbox processes, and I came across cgroups, which looked promising. I'm not super interested in using virtualization or strace for this, since I want programs to run as ...
1
vote
0answers
320 views

L2TP/IPSec Tunnel to Virtual Network Interface

How do I set up a virtual network interface in Ubuntu so that OpenSWAN will happily forward packets between a remote mobile subnet and sockets on the local virtual device? This is my infrastructure: ...
0
votes
1answer
220 views

Upstart: running app from home folder

I've created two user accounts for two applications: mongod and node.js. Both of these store their data in their home folder. This keeps data "sandboxed" and prevents them from needing to be in the ...
3
votes
1answer
1k views

Creating a Linux “sandbox” with AppArmor

I'm trying to sandbox a particular Python process, giving it access only to network communications and a select number of files on the file system. I followed the directions on the Ubuntu community ...
2
votes
3answers
460 views

How to sandbox (or monitor) a process on OSX

I'm running a piece of OCR software [with gui, etc] on OSX that watches a folder and OCRs PDFs that are put in there. Occasionally the process starts behaving poorly and consumes a huge amount of ...
1
vote
2answers
1k views

How to limit memory usage by application in linux?

I have a closed source software with some memory leaks problems. Is there a tool or solution to "sandboxe" processes in a fixed amount of memory without using "ulimit" (to generic, I need a ...
1
vote
3answers
301 views

What's your opinion (based on your experience with) Sandbox apps to isolate Windows programs?

I try out a lot of software and this tends to clog up Windows. So I thought (rather than breaking this bad habit) that I'd start using some Sandbox software to isolate software I'm trying out. Goal: ...
0
votes
5answers
253 views

Arbitrary Code Execution on Server

I am trying to build a web application (running on Linux servers) in which the user will upload an executable, the executable will be ran against a particular input available on the server (fed via ...
0
votes
3answers
288 views

What sandboxing environment can be used in shared hosting (no root access)?

I want to let users run custom programs in my web server without compromising the security. I have tried installing plash for days to amd64 server on Debian Etch (using Dreamhost web hosting) but ...