SANDBOX - Online Linux Manual PageSection : 8
Updated : May 2010
Source : sandbox
Note : User Commands

NAMEsandbox − Run cmd under an SELinux sandbox

SYNOPSISsandbox [-C] [ -d DPI ] [-l level ] [[-M | -X] -H homedir -T tempdir ] [-I includefile ] [ -W windowmanager ] [ -w windowsize ] [[-i file ]...] [ -t type ] cmd
sandbox [-C] [ -d DPI ] [-l level ] [[-M | -X] -H homedir -T tempdir ] [-I includefile ] [ -W windowmanager ] [ -w windowsize ] [[-i file ]...] [ -t type ] -S

DESCRIPTIONRun the cmd application within a tightly confined SELinux domain. The default sandbox domain only allows applications the ability to read and write stdin, stdout and any other file descriptors handed to it. It is not allowed to open any other files. The -M option will mount an alternate homedir and tmpdir to be used by the sandbox. If you have the policycoreutils-sandbox package installed, you can use the -X option and the -M option. sandbox -X allows you to run X applications within a sandbox. These applications will start up their own X Server and create a temporary home directory and /tmp. The default SELinux policy does not allow any capabilities or network access. It also prevents all access to the users other processes and files. Files specified on the command that are in the home directory or /tmp will be copied into the sandbox directories. If directories are specified with -H or -T the directory will have its context modified with chcon(1) unless a level is specified with -l. If the MLS/MCS security level is specified, the user is responsible to set the correct labels. −H --homedir  Use alternate homedir to mount over your home directory. Defaults to temporary. Requires -X or -M. −i, --include  Copy this file into the appropriate temporary sandbox directory. Command can be repeated. −I, --includefile  Copy all files listed in inputfile into the appropriate temporary sandbox directories. −l, --level  Specify the MLS/MCS Security Level to run the sandbox with. Defaults to random. −M, --mount  Create a Sandbox with temporary files for $HOME and /tmp. −t, --type  Use alternate sandbox type, defaults to sandbox_t or sandbox_x_t for -X. −T, --tmpdir  Use alternate tempory directory to mount on /tmp. Defaults to tmpfs. Requires -X or -M. −S, --session  Run a full desktop session, Requires level, and home and tmpdir. −w, --windowsize  Specifies the windowsize when creating an X based Sandbox. The default windowsize is 1000x700. −W, --windowmanager  Select alternative window manager to run within sandbox -X. Default to /usr/bin/matchbox-window-manager. −X  Create an X based Sandbox for gui apps, temporary files for $HOME and /tmp, secondary Xserver, defaults to sandbox_x_t −d, --dpi  Set the DPI value for the sanbox X Server. Defaults to the current X Sever DPI. −C, --capabilities  Use capabilities within the sandbox. By default applications executed within the sandbox will not be allowed to use capabilities (setuid apps), with the -C flag, programs can gain capabilities attached to executable files.

SEE ALSOruncon(1), seunshare(8), selinux(8)  

AUTHORThis manual page was written by Dan Walsh <dwalsh@redhat.com> and Thomas Liu <tliu@fedoraproject.org>
0
Johanes Gumabo
Data Size   :   10,632 byte
man-sandbox.8Build   :   2024-12-05, 20:55   :  
Visitor Screen   :   x
Visitor Counter ( page / site )   :   2 / 236,837
Visitor ID   :     :  
Visitor IP   :   3.145.83.149   :  
Visitor Provider   :   AMAZON-02   :  
Provider Position ( lat x lon )   :   39.962500 x -83.006100   :   x
Provider Accuracy Radius ( km )   :   1000   :  
Provider City   :   Columbus   :  
Provider Province   :   Ohio ,   :   ,
Provider Country   :   United States   :  
Provider Continent   :   North America   :  
Visitor Recorder   :   Version   :  
Visitor Recorder   :   Library   :  
Online Linux Manual Page   :   Version   :   Online Linux Manual Page - Fedora.40 - march=x86-64 - mtune=generic - 24.12.05
Online Linux Manual Page   :   Library   :   lib_c - 24.10.03 - march=x86-64 - mtune=generic - Fedora.40
Online Linux Manual Page   :   Library   :   lib_m - 24.10.03 - march=x86-64 - mtune=generic - Fedora.40
Data Base   :   Version   :   Online Linux Manual Page Database - 24.04.13 - march=x86-64 - mtune=generic - fedora-38
Data Base   :   Library   :   lib_c - 23.02.07 - march=x86-64 - mtune=generic - fedora.36

Very long time ago, I have the best tutor, Wenzel Svojanovsky . If someone knows the email address of Wenzel Svojanovsky , please send an email to johanes_gumabo@yahoo.co.id .
If error, please print screen and send to johanes_gumabo@yahoo.co.id
Under development. Support me via PayPal.