On 11/02/14 01:36, Jason A. Donenfeld wrote: > Hey folks, > > Late night clicking-while-drooling, I came across something a few > minutes ago that mildly piqued my interest -- mbox > <http://pdos.csail.mit.edu/mbox/>. It's a sandbox that uses a > combination of ptrace and seccomp bpf; neither ours nor exherbo's uses > both of these together. The killer feature, for us, that's motivating > me to write to this list, is that it creates a "shadow file system", > and then has the option to commit the changes of that file system to > the real file system, piece by piece, when the process is done. It > made me think of some discussions we had at FOSDEM about Portage > evolution and whatnot. I haven't looked at this tool past an initial > glance, but it does look like interesting food for thought. > > Jason >
At FOSDEM I have seen this interesting talk[1,2] on a similar subject. PRoot[3] would be similar to mbox. But CARE[4] might be great to reproduce build problems on user machines. justin 1 https://fosdem.org/2014/schedule/event/syscall/ 2 http://ftp.belnet.be/FOSDEM/2014/H2215_Ferrer/Saturday/Software_engineering_tools_based_on_syscall_instrumentation.webm 3 http://proot.me/ 4 http://reproducible.io/
signature.asc
Description: OpenPGP digital signature