[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: nsmux Documentation

From: Carl Fredrik Hammar
Subject: Re: nsmux Documentation
Date: Fri, 2 Oct 2009 09:16:38 +0200
User-agent: Mutt/1.5.20 (2009-06-14)


On Thu, Oct 01, 2009 at 07:52:57PM +0300, Sergiu Ivanov wrote:
> On Wed, Sep 30, 2009 at 09:45:32PM +0200, Arne Babenhauserheide wrote:
> > Am Mittwoch, 30. September 2009 18:36:34 schrieb Sergiu Ivanov:
> > > > It reads nice, but I miss an info: How can I activate nsmux, so I
> > > > can use the magic filenames?
> > > 
> > > Thank you for pointing out! :-) 
> > 
> > Can I also put it "on /"? 
> > That way I could activate it systemwide :) 
> Yes, this is the long-term goal, though I definitely won't advise you
> trying this out ATM -- one of the most important issues is security,
> about which nsmux does nothing but standard procedures, but it is
> possible that something more is required.

A secure way to use it on the entire filesystem would be to make use of
settrans -C flag, to start a shell chrooted to nsmux but not actually set
on /.  This way only programs started from the shell would be affected.

That is something like:

  settrans -C bash -- / nsmux ...

(I didn't test it, it might be the other way around.)


reply via email to

[Prev in Thread] Current Thread [Next in Thread]