Re: Preventing file writes outside of a tree or filesystem



On Wed, 27 Dec 2006 09:18:58 +0000 (UTC)
Andre Majorel <cheney@xxxxxxxxxxxxxxx> wrote:

Is there a way to run a subprocess so that it can read from all
files but not write to files outside of a tree or filesystem you
specify ? That would be on Linux but if there's a more general
solution, I'm interested in it.


Access privileges are granted to users and not to processes, so you
cannot ask the OS to restrict file access to a specific process. A
fairly hackish approach would be to preload a library that intercepts
the "open" call and applies your access policies.

I suspect you're asking the wrong question. What exactly are you trying
to achieve?

--
Stefaan A Eeckels
--
....one of the chief advantages of a CLI over a GUI: people who are
truly clueless are more likely to give up and walk away before they
mess things up too badly. --Logan Shaw

.



Relevant Pages

  • Re: USB memory stick
    ... Linux seems to recognize the device when it is plugged ... You're going to have to specify the fs type. ... And if you don't have support ... What filesystem is on that mem stick? ...
    (linux.redhat.install)
  • Re: Preventing file writes outside of a tree or filesystem
    ... Andre Majorel writes: ... files but not write to files outside of a tree or filesystem you ...
    (comp.unix.admin)
  • Re: Did you switch from Windows to Linux? How did you find the process?
    ... find a Linux "equivalent" to. ... firewall, periodically defragmenting the filesystem, periodically ... this machine here due to flawed hardware, ...
    (alt.os.linux)
  • Re: Where does fmtutil get its inputs?
    ... I want UK English hyphenation by default to avoid having to specify UK ... in a texmf.cnf file in an earlier searched tree. ... documentation, informal documentation like comments in configuration ... Removing configuration files would be a really stupid thing to do. ...
    (comp.text.tex)
  • Re: [RFC] Linux Kernel Subversion Howto
    ... >> tree if the whole thing can't be imported into it with the same ... Linux kernel development history even if their purpose is to import it ... alternate scm there are alternatives to the kernel -- gcc is a good ...
    (Linux-Kernel)