LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 10-17-2020, 07:31 AM   #1
n00b_noob
Member
 
Registered: Sep 2020
Posts: 196

Rep: Reputation: Disabled
Post Sandboxin a GUI program.


Hello,
I want to install an application on Debian 10.6 x86_64, but I don't like this application hurt my system or steal anything from my Debian box. I found a list of Sandboxing applications and I need opinions about them:
  1. SELinux
  2. Mbox
  3. Firejail
  4. Flatpak

I want to run a GUI application.

Thank you.
 
Old 10-17-2020, 09:44 AM   #2
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 15,599
Blog Entries: 9

Rep: Reputation: 4511Reputation: 4511Reputation: 4511Reputation: 4511Reputation: 4511Reputation: 4511Reputation: 4511Reputation: 4511Reputation: 4511Reputation: 4511Reputation: 4511
What application?
 
Old 10-17-2020, 12:50 PM   #3
neuron91
LQ Newbie
 
Registered: Oct 2020
Posts: 7

Rep: Reputation: Disabled
They all suck, your best option is to macro a terminal command you like
 
Old 10-17-2020, 02:00 PM   #4
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 23,212

Rep: Reputation: 6486Reputation: 6486Reputation: 6486Reputation: 6486Reputation: 6486Reputation: 6486Reputation: 6486Reputation: 6486Reputation: 6486Reputation: 6486Reputation: 6486
Quote:
Originally Posted by neuron91 View Post
They all suck, your best option is to macro a terminal command you like
This makes no sense in the context of the question the OP asked.
 
Old 10-17-2020, 02:03 PM   #5
EdGr
Member
 
Registered: Dec 2010
Location: California, USA
Distribution: I run my own OS
Posts: 513

Rep: Reputation: 243Reputation: 243Reputation: 243
If you don't trust an application, you should not install it as root.

You can create a user account for the purpose of installing the application in ~/.local and running it as that user. The application will likely need to be compiled to run from ~/.local.

Then, be aware that X11 offers no security between client applications.

If you really don't trust an application, a dedicated machine or VM may be the best solution.
Ed
 
Old 10-17-2020, 03:32 PM   #6
n00b_noob
Member
 
Registered: Sep 2020
Posts: 196

Original Poster
Rep: Reputation: Disabled
SELinux and sandboxing are useless? Thus, Sandboxing apps are toys?
 
Old 10-17-2020, 03:55 PM   #7
EdGr
Member
 
Registered: Dec 2010
Location: California, USA
Distribution: I run my own OS
Posts: 513

Rep: Reputation: 243Reputation: 243Reputation: 243
I am somewhat familiar with AppArmor. It provides fine-grained access controls to limit possible damage resulting from security vulnerabilities. The assumption is that the application is benign but may have security vulnerabilities.

Since you asked about installing an application, you should be aware that installing as root already means that you trust the application.

What application are you worried about?
Ed
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Collision between GUI sessions in openSUSE 13.2 if program from another user run under first user GUI session. xode SUSE / openSUSE 2 02-19-2017 12:09 AM
how to use web to invoke php program, and the php program call c program bellhuang Linux - Server 10 01-13-2014 06:09 AM
Do you think I should use a Qt GUI, a GTK GUI, or no GUI at all? anon02 Programming 5 08-25-2011 06:59 AM
[screen program] Using with wine GUI program? Vhann Linux - Server 2 10-25-2009 05:15 PM
Gui What GUI rrose42 Linux - General 14 03-27-2002 11:45 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 11:24 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration