linux - Disabling access to "exec" functions? -


Assume that I have a process "A" that loads a dynamic library "L".

Q: What is a way to disable access to the "exec" function to work inside "L"? Dynamic library is part of the same process space as the calling application, so it's definitely easy to share. (And I also think it is possible without rejecting your application). If you can wrap the library in a separate application, the apparmer or SLEINX can help, but in general: Why are you loading an unreliable library in your application?

You can also see how Chromium deals with sandboxing is helpful.


Comments

Popular posts from this blog

iphone - How do I make a UIPickerView in a UIActionSheet -

java - Is there an object like a "Set" that can contain only unique string values, but also contain a count on the number of occurrences of the string value? -