mainPlash - Summary

 
 
Membership Info
Group Admin:
1 active member

Group identification
Id: 7090
System Name: plash
Name: Plash
Group Type: non-GNU software and documentation

Search in this Group


 

This group is not part of the GNU Project.

Plash is a Unix shell which lets you run Unix programs with access only to the files and directories they need to run.

In order to implement this the filesystem is virtualised. Each process can have its own namespace -- its own root directory -- which can contain a subset of your files.

This is implemented by modifying GNU libc and replacing the system calls that use filenames. For example, open() is changed so that it sends a message to a file server via a socket. If the request is successful, the server sends the client a file descriptor via the socket as a result. Processes are run as the user `nobody', and in a chroot jail, so that they can't access any files using the usual system calls, and must go through the file server instead. This approach doesn't require modifying the kernel at all.

Plash works on existing unmodified Linux binaries, provided they are dynamically linked, which is almost always the case.

Registration Date: Tue 07 Dec 2004 09:14:24 PM UTC
License: GNU General Public License v2 or later
Development Status: 3 - Alpha

 

Latest News rss feed

No news found

Quick Overview
 Memberlist (1 member)

Communication Tools
 Mailing Lists (1 public mailing list)

Development Tools
 Task Manager (open items: 0, total: 0)
 Patch Manager (open items: 0, total: 0)

Back to the top

Powered by Savane 3.13-02a9.
Corresponding source code