View source for User:ScotXW/Sandboxes on Linux

* Issues of [[iX]], [[c't]], [[:de:Linux-Magazin]] in Years 2014/2015 contain a couple of comprehensive articles on the available Linux solutions even with their history!

'''Sandboxes on Linux''' looks at the different mechanisms there are to implement sandbox on '''Linux = [[Linux kernel]]-based family of operating systems'''. With regard to the article [[sandbox (computer security)|sandbox]] being a pile of crap: [[Special:Permalink/614691710|July 2014]] it is hard to document these software project, since we cannot just refer to the article to explain the underlying mechanisms and their merits. I doubt Wikipedia will ever attract good writers... its not the money, its the idiots being around here, and throwing money at it, will not help. Best follow [[Helmuth von Moltke the Elder]] advise and send them far far away...

# I think [[User:ScotXW/Virtualization]] introduced [[Sandbox (computer security)|sandboxes]] and containers. If there is a difference between a sandbox and a container, I guess sandbox = for 1 application, container = for n applications. Sandbox was originally only for <u>security</u>, but nothing speaks against applying <u>resource management</u> to it.

* [[Linux Security Modules]] (is a framework that allows the Linux kernel to support a variety of computer security models while avoiding favoritism toward any single security implementation.)
** '''[[Smack (software)|Smack]]''' is utilized to [[sandbox (computer security)|sandbox]] HTML5 web applications in [[Tizen]].<ref name="Tizen">{{cite web
| url = http://download.tizen.org/misc/media/conference2012/wednesday/seacliff/2012-05-09-0945-1025-understanding_the_permission_and_access_control_model_for_tizen_application_sandboxing.pdf
| title = Understanding the Access Control Model for Tizen Application Sandboxing
| archiveurl = http://www.webcitation.org/6AqsXTUx0
| archivedate = 2012-09-12
}}</ref>
**[[AppArmor]]
**[[Security-Enhanced Linux|SELinux]]
**[[TOMOYO Linux|TOMOYO]]
* '''[[Capsicum (software)|Capsicum]]''': originally proposed 2010 at [[USENIX Security Symposium]] in a paper named "Capsicum: practical capabilities for UNIX" by Robert N. M. Watson ([[Computer Laboratory, University of Cambridge|CL, University of Cambridge]]) Jonathan Anderson ([[Computer Laboratory, University of Cambridge|CL, University of Cambridge]]) Ben Laurie (Google UK Ltd.) Kris Kennaway (Google UK Ltd.)<ref>{{cite web |url=http://www.cl.cam.ac.uk/research/security/capsicum/papers/2010usenix-security-capsicum-website.pdf |title=Capsicum: practical capabilities for UNIX |date=2010}}</ref> As the name sugggest it targets [[User:ScotXW/Linux as platform#UNIX®|UNIX]]® (not "unix-like" or Ronald MacDonald). An implementation was written for [[FreeBSD]] and mainlined there in 9.0.<ref>{{cite web |url=http://lwn.net/Articles/482858/ |title=Capsicum: practical capabilities for UNIX |publisher=[[LWN.net]] |date=2012-02-22}}</ref> This could make Capsicum available in the [[PlayStation 4 system software]], which was forked from FreeBSD 9.0. In July 2014, some people proposed to do Capsicum for the Linux kernel.<ref>{{cite web |url=https://lwn.net/Articles/604015/ |title=Capsicum in the Linux kernel |publisher=[[LWN.net]] |date=2014-07-01}}</ref><br>{{YouTube|raNx9L4VH2k|2010 – Capsicum: Practical Capabilities for UNIX}} [https://archive.fosdem.org/2014/schedule/event/capiscum/ FOSDEM 2014: Capsicum]
* '''[[User:ScotXW/kdbus|kdbus]]/[[cgroups]]/[[systemd]]''' – [[Lennart Poettering]] et al. have been working on a Sandbox/Container based on these Linux kernel components. As of July 2014 kdbus is ready, but still waits to be accepted into Linux kernel mainline. This solution should give security AND resource management. Something [[klik (packaging method)|klik]]-like could augment [[.deb]] and [[.rpm]]; by abandoning shared libraries, this could solve the problem of a missing widely-adopted '''[[Linux ABI]]''' and the [[User:ScotXW/Linux as platform#not free enough|not free enough]] problem. Abandoning "share libraries" removes test cases from them, this is bad, but maybe having to package the same software is more bad. ''[[Rigs of Rods]]'' is still not in the Debian repos. So we either make Linux people compile it, or serve klick-like packages to download next to the Window-install-package free for download.
* '''[[seccomp]]''' – mainlined 2.6.12 2005-03-08

== Comparison ==
{| class="wikitable" style="text-align: center"
|-
|+ Sandboxing [[Chromium (web browser)|Chromium]] (<small>based on Jonathan Anderson at FOSDEM2014</small>)
|-
! [[Operating system|OS]] !! Techinque !! {{abbr|LoC|Lines of Code}} !! [[File system|FS]] !! [[Inter-process communication|IPC]] !! NET !! S≠S' !! Priv
|-
! style="text-align:left"| Windows
| [[Discretionary access control|DAC]] [[Access control list|ACLs]] || 22,350 || {{partial|△}} || {{partial|△}}  || {{na}} || {{na}} || {{ya}} || Windows ACLs and SIDs
|-
! rowspan=4 style="text-align:left"| Linux
| [[chroot]] || 600 || {{ya}} || {{na}} || {{na}} || {{ya}} || {{na}} || SUID-root sandbox helper
|-
| [[Security-Enhanced Linux|SELinux]] || 200 || {{ya}} || {{partial|△}}  || {{ya}} || {{na}} || {{na}} || Type Enforcement sandbox domain
|-
| [[seccomp]] || 11,300 || {{partial|△}}  || {{ya}} || {{ya}} || {{ya}} || {{ya}} || seccomp and userspace syscall wrapper
|-
| [[User:ScotXW/kdbus|kdbus]] & [[cgroups]] || {{dunno}} || {{dunno}}  || {{dunno}} || {{dunno}} || {{dunno}} || {{dunno}} || also facilitates [[resource management]]; {{man|1|systemd-nspawn|Fedora||inline}}
|-
! style="text-align:left"| OS X
| Sandbox || 560 || {{ya}} || {{partial|△}}  || {{ya}}|| {{ya}}|| {{ya}} || Seatbelt? Path-based MAC sandbox
|-
! style="text-align:left"| FreeBSD
| [[Capsicum (software)|Capsicum]] || 100 || {{ya}} || {{ya}}|| {{ya}}|| {{ya}}|| {{ya}} || Capsicum sandboxing using cap_enter
|}

* [[Capability-based security]]

{{User:ScotXW/Template:Virtualization}}
==References==
{{Reflist}}