On 5/12/06, Hisham Muhammad <[EMAIL PROTECTED]> wrote:
On 5/12/06, Carlo Calica <[EMAIL PROTECTED]> wrote:
> Quick fix is forcing the use of FiboSandbox.
Yes, since the chroot is a sandbox by itself, it's not too problematic
to use it, or even use no sandbox (being careful when looking at the
results of the compilation).
Fallback to Fibo is probably best. That'll trap writes to outside the
sandbox. Good info to know. Have any suggestions where to look to
add that. I haven't looked too closely at ChCompile yet.
> Longterm, .....
Good question. Perhaps a lower-level fix would be necessary. Forking
with special flags to create a process-specific mount table may make
unionfs happy. I don't know.
I have a few ideas. It can wait until post 013.
--
Carlo J. Calica
_______________________________________________
gobolinux-devel mailing list
gobolinux-devel@lists.gobolinux.org
http://lists.gobolinux.org/mailman/listinfo/gobolinux-devel
