Ausnahme gefangen: SSL certificate problem: certificate is not yet valid 📌 Limit a process to a specific directory (and sub-directories)?
Team IT Security Nachrichtenportal Logo

🏠 Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeiträge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden Überblick über die wichtigsten Aspekte der IT-Sicherheit in einer sich ständig verändernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch übersetzen, erst Englisch auswählen dann wieder Deutsch!

Google Android Playstore Download Button für Team IT Security
RSS Feed Symbol für Team IT Security 800+ IT News als RSS Feed abonnieren



📚 Limit a process to a specific directory (and sub-directories)?


💡 Newskategorie: Linux Tipps
🔗 Quelle: reddit.com

Suppose I want to run a script, a command or a generic executable. Is there a way to prevent said process accessing files outside the current working directory?

I know there is chroot, but it's not very ergonomic because one has to prepare the virtual environment with all the dependencies.

macOS has a nice (but limited) feature that restricts access to common user directories (desktop, documents and so on) showing a dialog the first time a process is trying to access something inside these folders.

I guess I'm looking for a sandbox runtime like the one provided by deno and its Permission API

It is probably possible to achieve something similar using docker containers and mounting only specific volumes, I tried this by it wasn't good enough, the configuration wasn't trivial.

I'm wondering if there is something at the system level to achieve this with as little overhead as possible, both in terms of resources and time to configure.

​

For those interested in the "Why": when a user launches a process, it runs with the user permissions by default, thus it's able to read from (and write to) the file system just like a user is. This is something that really makes me uncomfortable because it means a malicious script/program can easily steal my ssh keys, not to mention all my personal and/or confidential data.

submitted by /u/inamestuff
[link] [comments] ...



Sharing is caring on Social Media

🔗 Reddit
🔗 Telegram
🔗 LinkedIn
🔗 Xing
🔗 Twitter
🔗 Whatsapp
🔗 Facebook
🔗 Flipboard

Join the Team IT Security Community

🔗 "IT Sicherheit" Reddit-Gruppe
🔗 "IT Sicherheit" Telegramm-Seite

📌 Limit a process to a specific directory (and sub-directories)?


📈 40.57 Punkte

📌 r/linuxhelp is a 10 year old subreddit that has 252 members and 3 active users as of now. This sub is pointless thanks to restricted submissions and honestly an absolute waste of the 'critical sub name'!!


📈 32.52 Punkte

📌 Garud - An Automation Tool That Scans Sub-Domains, Sub-Domain Takeover And Then Filters Out XSS, SSTI, SSRF And More Injection Point Parameters


📈 32.52 Punkte

📌 Pip Install Specific Version — How to Install a Specific Python Package Version with Pip


📈 27.78 Punkte

📌 SauronEye - Search Tool To Find Specific Files Containing Specific Words, I.E. Files Containing Passwords


📈 27.78 Punkte

📌 can anyone tell , while I am using Pycharm why so many python process are running, like as pycharm itself takes approx 1.5 gb memory(as you can see by process named java) , but right now , due to multiple python process my memory usage is 7.3gb .


📈 27.16 Punkte

📌 Optus lacking sub-1GHz spectrum drives decision to limit low-band spectrum holdings


📈 25.86 Punkte

📌 Malwoverview.py is a first response tool to perform an initial and quick triage in a directory containing malware samples, specific malware sample, suspect URL and domains. Additionally, it allows to download and send samples to main online sandboxes


📈 25.49 Punkte

📌 Developing a Company-Specific ChatGPT is One-Third Technology and Two-Thirds Process Improvements


📈 24.73 Punkte

📌 Cuvva: Time-limit Bypassing, Rate-limit Bypassing and Spamming at https://ops.cuvva.co


📈 24.56 Punkte

📌 How to Solve “Sub-process /usr/bin/dpkg returned an error code (1)” In Ubuntu


📈 23.52 Punkte

📌 Kill Process Running on a Specific Port in Linux


📈 22.95 Punkte

📌 How to Wait for a Specific Process to Complete in Linux?


📈 22.95 Punkte

📌 CVE-2015-6829 | WP Limit Login Attempts Plugin up to 2.0.0 on WordPress HTTP Header wp-limit-login-attempts.php getip X-Forwarded-For/Client-IP sql injection (ID 1239492)


📈 22.77 Punkte

📌 Malwoverview - Tool To Perform An Initial And Quick Triage On Either A Directory Containing Malware Samples Or A Specific Malware Sample


📈 21.92 Punkte

📌 SharpSniper - Find Specific Users In Active Directory Via Their Username And Logon IP Address


📈 21.92 Punkte

📌 SharpSniper – Find Specific Users In Active Directory Via Their Username And Logon IP Address


📈 21.92 Punkte

📌 Process and data isolation strategies pt. 1 - Sandboxes and Process imprisonment


📈 21.68 Punkte

📌 Web Wiz NewsPad 1.02 rte_file_browser.asp sub directory traversal


📈 20.71 Punkte

📌 Web Wiz Forums 9.07 rte_file_browser.asp sub directory traversal


📈 20.71 Punkte

📌 Perl 5.8.0/5.8.1/5.8.3/5.8.4 Sub-Directory File::Path::rmtree race condition


📈 20.71 Punkte

📌 I want to print directory name and complete path of the file using recursion ? what is wrong with this code it only print one directory at a time .. i want to do it for all directory recursively ???


📈 20.51 Punkte

📌 Microsoft Windows 8.1 Console Driver Job Object Process Limit Bypass


📈 20.44 Punkte

📌 Microsoft Windows 8.1 Console Driver Job Object Process Limit Bypass


📈 20.44 Punkte

📌 How to limit process resource usage


📈 20.44 Punkte

📌 How to view the open file limit for a Linux process


📈 20.44 Punkte

📌 How to use ‘cp’ command to exclude a specific directory


📈 20.13 Punkte

📌 How to Pull Specific Directory With Git


📈 20.13 Punkte

📌 trying to search multiple directories for a specific date and copy file from the directory with that date


📈 20.13 Punkte

📌 How to Extract Tar Files to Specific or Different Directory in Linux


📈 20.13 Punkte

📌 Vuln: IBM Business Process Manager Advanced and WebSphere Process Server Security Bypass Vulnerability


📈 19.9 Punkte

📌 Vuln: IBM Business Process Manager Advanced and WebSphere Process Server Security Bypass Vulnerability


📈 19.9 Punkte

📌 Sysinternals Updates: Process Explorer v17.0, Handle v5.0, Process Monitor v3.92 and Sysmon v14.11, (Sun, Oct 30th)


📈 19.9 Punkte

📌 Station is a convergent terminal emulator. A good fit for mobile devices a with the updates more featured completed: alerts on finished process, search highlighter, close process warnings and much more.


📈 19.9 Punkte

📌 I am using fzf fuzzy finder to filter process and kill it. The command works but when i pass it as as alias in .zshrc, it kills the process but throws following warnings. Is there better/correct way to do it ?


📈 19.9 Punkte











matomo

Kontakt

24/7 kontakt@tsecurity.de

Weitere Informationen

Google Android Playstore Download Button für Team IT Security
🔗 Impressum
🔗 Datenschutz
Paypal Spenden für Projekt

Social Media

🔗 Facebook
🔗 Reddit
🔗 Team IT Security als Elektron App
🔗 © 2015-2023 Team IT Security Nachrichtenportal über Cybersecurity
🔗 CMS "myDraft" a PHP Portal Software