Sandboxing applications on Scientific Linux and family

I am convinced this is overkill, but it works nicely. (First install the policycoreutils-sandbox package:- yum install policycoreutils-sandbox)
mkdir /tmp/myweb ~/myweb
sandbox -X -T /tmp/myweb -H ~/myweb -t sandbox_web_t firefox

Then you can download any content, setup bookmarks ... and the sandbox will not remove them when you are done. If you later run a command with the same sandbox homedir and tmpdir, the content will be there.
(From Dan Walsh site)

Just replace firefox with whatever eg. gftp, opera etc. The saved stuff will be in ~/myweb



(Posting here in case you didn't see it in SL forum)

Edit:-
The -i flag.

sandbox -X -t sandbox_web_t -i /home/user/.opera opera

Copies the contents of the .opera directory into the sandbox. Probably not a great idea
if passwords are not removed beforehand.

 

very nice tutorial indeed we want more tutorials ocky

making them help you when you needed them also newbie like me

 

Can we do it on Ubuntu? I wish some one makes a GUI tool for these things.

 

SELinux is apparently available in Ubuntu. https://wiki.ubuntu.com/Security/Features#SELinux
However Apparmor is the preferred Mac. SELinux may slow down your computing a little.
Please note that I have never tried SELinux on any Ubuntus, but it works really nice on Scientific Linux 6 and I have not noticed any slowness compared to Ubuntu.

 

Thanks.