linux - Disabling access to "exec" functions? -
Assume that I have a process "A" that loads a dynamic library "L".
Q: What is a way to disable access to the "exec" function to work inside "L"? Dynamic library is part of the same process space as the calling application, so it's definitely easy to share. (And I also think it is possible without rejecting your application). If you can wrap the library in a separate application, the apparmer or SLEINX can help, but in general: Why are you loading an unreliable library in your application?
You can also see how Chromium deals with sandboxing is helpful.
Comments
Post a Comment