Github/nsjail
1
0
Fork 0
mirror of https://github.com/google/nsjail.git synced 2026-08-30 18:41:30 -07:00
Code Issues Packages Projects Releases Wiki Activity

config: Initial work on converting config.c to c++ protobuf lib

Browse Source 
config: Initial work on converting config.c to c++ protobuf lib #2

config: Initial work on converting config.c to c++ protobuf lib #3

config: Initial work on converting config.c to c++ protobuf lib #4

config: Initial work on converting config.c to c++ protobuf lib #5

config: Initial work on converting config.c to c++ protobuf lib #6
This commit is contained in:
Robert Swiecki
2017-09-13 22:03:21 +02:00
parent dae05bfd31
commit 374f6cc4f0
24 changed files with 832 additions and 843 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
configs/home-documents-with-xorg-no-net.cfg
View File

@@ -1,13 +1,12 @@
name: "documents-with-xorg"
description: "
This policy allows to run many X-org based tool, which are allowed
to access $HOME/Documents directory only. An example of use is:
./nsjail --config configs/documents-with-xorg.cfg -- \\
/usr/bin/geeqie /user/Documents/
What is more, this policy doesn't allow to access networking.
"
description: "This policy allows to run many X-org based tool, which are allowed"
description: "to access $HOME/Documents directory only. An example of use is:"
description: ""
description: "./nsjail --config configs/documents-with-xorg.cfg -- \\"
description: " /usr/bin/geeqie /user/Documents/"
description: ""
description: "What is more, this policy doesn't allow to access networking."
mode: ONCE
hostname: "NSJAIL"
@@ -127,13 +126,11 @@ mount {
is_bind: true
}
seccomp_string: "
POLICY example {
KILL {
ptrace,
process_vm_readv,
process_vm_writev
}
}
USE example DEFAULT ALLOW
"
seccomp_string: " POLICY example {"
seccomp_string: " KILL {"
seccomp_string: " ptrace,"
seccomp_string: " process_vm_readv,"
seccomp_string: " process_vm_writev"
seccomp_string: " }"
seccomp_string: " }"
seccomp_string: " USE example DEFAULT ALLOW"