linux - Disabling access to "exec" functions? -


Assume that I have a process "A" that loads a dynamic library "L".

Q: What is a way to disable access to the "exec" function to work inside "L"? Dynamic library is part of the same process space as the calling application, so it's definitely easy to share. (And I also think it is possible without rejecting your application). If you can wrap the library in a separate application, the apparmer or SLEINX can help, but in general: Why are you loading an unreliable library in your application?

You can also see how Chromium deals with sandboxing is helpful.


Comments

Popular posts from this blog

c# - How to capture HTTP packet with SharpPcap -

php - Multiple Select with Explode: only returns the word "Array" -

php - jQuery AJAX Post not working -