Practical and effective sandboxing for non-root users

Proceedings of the 2013 USENIX Annual Technical Conference, USENIX ATC 2013

Volumn , Issue , 2019, Pages 139-144

  Kim, Taesoo ^a   Zeldovich, Nickolai ^a  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

VIRTUAL REALITY;

CHECK POINTING; NETWORK ACCESS; PROGRAM EXECUTION; SYSTEM CALL INTERPOSITION; SYSTEM CALLS; SYSTEM PACKAGE; USAGE MODELING; VIRTUAL DEVELOPMENT;

FILE ORGANIZATION;

EID: 85077193678     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (12)

1. Dynamic seccomp policies (using BPF filters). http://lwn.net/Articles/475019, January 2012.
2. A. Arcangeli. Seccomp: secure computing mode. http://en.wikipedia.org/wiki/Seccomp. January 2013.
3. dotCloud. Docker: The Linux container engine. http://www.docker.io, 2013.
4. T. Garfinkel. Traps and pitfalls: Practical problems in system call interposition based security tools. In Proceedings of the Network and Distributed System Security Symposium (NDSS), February 2003.
5. T. Garfinkel, B. Pfaff, and M. Rosenblum. Ostia: A delegating architecture for secure system call interposition. In Proceedings of the Network and Distributed System Security Symposium (NDSS), February 2004.
6. P. Grosjean. Octave benchmark 2: speed comparison of various number crunching packages (version 2). http://sciviews.org/benchmark. January 2013.
7. D. Libenzi. FL-COW 0.10. http://xmailserver.org/flcow.html. January 2013.
8. J. R. Okajima. Aufs3: Advanced multi layered unification filesystem version 3.x. http://aufs.sf.net. January 2013.
9. R. Pike, D. Presotto, K. Thompson, and H. Trickey. Plan 9 from Bell Labs. In Proceedings of the Summer 1990 UKUUG Conference, pages 1-9, 1990.
10. S. Potter and J. Nieh. Apiary: Easy-to-use desktop application fault containment on commodity operating systems. In Proceedings of the Annual USENIX Technical Conference, pages 103-116, June 2010.
11. D. Quigley, J. Sipek, C. Wright, and E. Zadok. Unionfs: User-and community-oriented development of a unification filesystem. In Proceedings of the 2006 Linux Symposium, volume 2, pages 349-362, 2006.
12. J. Uekawa. Cowdancer: copy-on-write data access completely in userland. http://www.netfort.gr.jp/~dancer/software/cowdancer.html.en. January 2013.