New answers tagged

0

What about monitoring the system calls on the side of the kernel using an external gdb instance. This could be done by setting up a virtual machine that is configured to run the code of interest. Then QEMU and KVM (by my knowledge) have to be configured to open a port for gdb debugging of the kernel. (See guides blow.) If this VM is started gdb could be ...


2

The simple answer is "it depends on the sandbox". Sandboxing is not a binary state. Every bit of code that isn't running in supervisor (ring 0) (or hypervisor/ring -1, where relevant) on the processor could be described as at least a little "sandboxed". User-mode admin code is a little sandboxed, user-mode non-admin code moreso, user-mode code running with ...


Top 50 recent answers are included