LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Sandboxin a GUI program. (https://www.linuxquestions.org/questions/linux-security-4/sandboxin-a-gui-program-4175683790/)

n00b_noob 10-17-2020 07:31 AM

Sandboxin a GUI program.
 
Hello,
I want to install an application on Debian 10.6 x86_64, but I don't like this application hurt my system or steal anything from my Debian box. I found a list of Sandboxing applications and I need opinions about them:
  1. SELinux
  2. Mbox
  3. Firejail
  4. Flatpak

I want to run a GUI application.

Thank you.

ondoho 10-17-2020 09:44 AM

What application?

neuron91 10-17-2020 12:50 PM

They all suck, your best option is to macro a terminal command you like

TB0ne 10-17-2020 02:00 PM

Quote:

Originally Posted by neuron91 (Post 6176184)
They all suck, your best option is to macro a terminal command you like

This makes no sense in the context of the question the OP asked.

EdGr 10-17-2020 02:03 PM

If you don't trust an application, you should not install it as root.

You can create a user account for the purpose of installing the application in ~/.local and running it as that user. The application will likely need to be compiled to run from ~/.local.

Then, be aware that X11 offers no security between client applications.

If you really don't trust an application, a dedicated machine or VM may be the best solution.
Ed

n00b_noob 10-17-2020 03:32 PM

SELinux and sandboxing are useless? Thus, Sandboxing apps are toys?

EdGr 10-17-2020 03:55 PM

I am somewhat familiar with AppArmor. It provides fine-grained access controls to limit possible damage resulting from security vulnerabilities. The assumption is that the application is benign but may have security vulnerabilities.

Since you asked about installing an application, you should be aware that installing as root already means that you trust the application.

What application are you worried about?
Ed


All times are GMT -5. The time now is 05:17 AM.