While I was reading about browser sandboxing coming up in Vista and musing about how easy or difficult it would be to sandbox OTHER 3rd party applications, I found a comment on a ZDNet post that I think I’ll just copy directly (of course, giving credit to the poster…) Of course, with the user seperation under linux, individual users have NO access to other users folders by default. ONLY the administrator can access individual user folders. So, you obviously don’t want to run a web browser as the administrator (root), but you could setup another user account to run your web browser under if you’re particularly concerned about isolating it from NOT just the system files, but YOUR files as well.
There are other ways to do this as well, some as complicated as running vmplayers browser appliance, or doing your own chrooted install of a browser, etc. etc. etc. However, the solution provided for sandboxing was really a very simple and straightforward approach.
I’m sorry it isn’t a default setting but this issue is no edge for over the horizon (… Vista?). The things necessary won’t be done by mom and pop but I’m sure that George can do it and any sufficently motivated Linux distribution could set it up as default today.
Step 1: Set up a new user account. For purposes of illustration, call it ‘sandbox.’
Step 2: Tell the browser to always run out of ‘sandbox.’ I’ll describe how to do that using SuSE with KDE. First, right click on the icon for your browser. Second, click on the application tab. Third, click on the advanced button. Fourth, click the ‘run as different user’ button. Fill in the user name ‘sandbox.’
Step 3: Close the command line interface. I never told you to use that in the first place.
Posted by: palmwarrior Posted on: 03/23/06
Thanks to palmwarrior. I’ve got to say, I make use of konquerors “run command”, “run as a different user” ALL the time on another linux desktop I visit frequently. my main goal is running the web browser as MY user instead of the logged in user, so that any remembered passwords, etc are kept under MY profile instead of whoever is logged in at the time. But it could just as easily be used to sandbox ANY application. Of course, what’s described above is a bit different than the “run command” box, but a setting that can be made for any desktop link.
Related PostsRelated Posts
- Remote tech support with anything - would I do it? I've tried to ask myself if I'd trust someone enough to let them run a remote session on my own desktop to solve a problem. I think the answer is "it depends". If you think about it, I do tech support for home users quite a bit and they let......
- Zoneminder for a linux based home security DVR system This is filed under security, but a slightly different angle than the usual computer security articles. I just ran across a link I've kept to Zoneminder. Zoneminder is a neat linux application to help you setup your very own DVR (digital video recorder) for a security camera type (CCTV ?)......
- Sun Java security updates/ Windows software update rant... Incidents.org has the story on Sun's release of new versions of the Java Runtime Environment and the Java SDK to fix some remote security vulnerabilities. These security vulnerabilities could allow malicious, untrusted code to compromise a user's computer. Sun recommends that users update to the newest version of the SDK......
- Make Free Phone Calls Anywhere in the USA with Google Voice, Gizmo, and Asterisk Update: The instructions here are no longer valid, because Google has since closed off inbound SIP calls into Google Voice. However, I have posted a new solution for making free phone calls with Google Voice, Gizmo, and Asterisk. I recently switched my GrandCentral account over to Google Voice. I fooled......
- Run infected exe files without getting infected Don't want to infect your system by executing infected executables? Try Sandboxie then. Sandboxie runs your programs in an isolated space which prevents them from making permanent changes to other programs and data in your computer. How to run infected files with Sandboxie? 1. Download Sandboxie 2. Navigate to the......
- Is Running Really Ideal for Burning Fat? [/caption] Running is a tough exercise. Don't believe me? Go out and get ten kilometers under your belt. If you haven't been running for a while, you realize how daunting this is even after the first few minutes. An exercise so difficult and so constant must really burn the fat,......
- The Vista stories keep coming – Vista bad news for small security companies
- Running kontact components standalone
- Hiding a user from the Welcome screen in Windows XP
- Opera security patch
- The D-Link DWL-800AP+ as a wireless repeater to extend wireless range – Part 2