Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options questions only not deleted user 27403

a security mechanism that separates running programs from each other so that untested, or untrusted programs won't inject malicious or bad code.

4 votes
1 answer
6k views

Run untrusted application safely through sandbox-exec command

I'm trying to run a potentially untrusted application without the following permissions, through the sandbox-exec command: file write (to avoid corruption/injection of files) network (to avoid communicate … (deny process-exec) # bullet point #4 (deny sysctl-write) # logging every action possible (trace "/tmp/myapp_output.sb") (debug all) At this point, I run the following command to run MyApp safely: sandbox-exec …
auino's user avatar
  • 171