Tagged Questions
3
votes
3answers
252 views
Designing a Sandbox for Windows
I am thinking about the design for a sandbox, which is able to execute arbitrary unmodified, untrusted binaries. The goal is to implement an application
Unlike something like e.g. Google Chrome's ...
2
votes
1answer
81 views
Force all user processes to be ptraced
I'm implementing a ptrace based tool for logging system call use. It is much more simple than strace, but I'm doing this so I can learn how these tools work. I'd like to trace all user processes since ...
5
votes
4answers
3k views
Monitoring system calls (in a reliable and secure way)
It there a reliable method of “monitoring” system calls under Linux?
There is strace for example to monitor system calls and signals. Is there a way for a process to dodge out of strace? If yes, is ...
4
votes
3answers
604 views
Wrapping system call (in reliable and secure way)
It there reliable method of "wrapping" system calls under Linux ?
(Like LD_PRELOAD for wrapping shared library function calls.)
Is there reliable, secure method of "wrapping" system calls (and, maybe ...
7
votes
2answers
312 views
Running proprietary software on Linux safely
As a summer project, I'm looking to prevent any piece of proprietary software like many games I run from have access to my personal files. After looking a lot at sandboxing, I've decided that anything ...
5
votes
1answer
362 views
Does sandboxie “grab” all the system calls?
Sandboxie: http://www.sandboxie.com
Does sandboxie "grab" all the system calls, e.g.: filesystem calls? Or it "grabs" all the low level calls from a process?
