2
votes
1answer
431 views

Limiting a process' network access on Linux?

I've been researching how to sandbox processes, and I came across cgroups, which looked promising. I'm not super interested in using virtualization or strace for this, since I want programs to run as ...
3
votes
1answer
1k views

Creating a Linux “sandbox” with AppArmor

I'm trying to sandbox a particular Python process, giving it access only to network communications and a select number of files on the file system. I followed the directions on the Ubuntu community ...
1
vote
2answers
1k views

How to limit memory usage by application in linux?

I have a closed source software with some memory leaks problems. Is there a tool or solution to "sandboxe" processes in a fixed amount of memory without using "ulimit" (to generic, I need a ...
0
votes
5answers
253 views

Arbitrary Code Execution on Server

I am trying to build a web application (running on Linux servers) in which the user will upload an executable, the executable will be ran against a particular input available on the server (fed via ...
0
votes
3answers
286 views

What sandboxing environment can be used in shared hosting (no root access)?

I want to let users run custom programs in my web server without compromising the security. I have tried installing plash for days to amd64 server on Debian Etch (using Dreamhost web hosting) but ...