| |||||||||||||
ptracingptracingPosted Dec 3, 2009 1:33 UTC (Thu) by ebiederm (subscriber, #35028)In reply to: ptracing by martine Parent article: Callaway: Chromium: Why it isn't in Fedora yet as a proper package
seccomp may be a better solution. Just as a point of reference you could add a network namespace and get the ability not to connect to unix domain sockets aka dbus.
The plan is to eventually support proper uid/security credential namespaces and allow all of this as non-root. Unfortunately we aren't quite there yet.
(Log in to post comments)
|
|||||||||||||