New answers tagged sandbox
0
What about monitoring the system calls on the side of the kernel using an external gdb instance.
This could be done by setting up a virtual machine that is configured to run the code of interest. Then QEMU and KVM (by my knowledge) have to be configured to open a port for gdb debugging of the kernel. (See guides blow.)
If this VM is started gdb could be ...
2
The simple answer is "it depends on the sandbox". Sandboxing is not a binary state. Every bit of code that isn't running in supervisor (ring 0) (or hypervisor/ring -1, where relevant) on the processor could be described as at least a little "sandboxed". User-mode admin code is a little sandboxed, user-mode non-admin code moreso, user-mode code running with ...
Top 50 recent answers are included
