[Exherbo-dev] Proper network sandboxing

Ciaran McCreesh ciaran.mccreesh at googlemail.com
Tue Aug 25 23:13:49 BST 2009


On Wed, 26 Aug 2009 01:09:20 +0300
Ali Polatel <polatel at gmail.com> wrote:
> To do this we have to take ports into account as well but that's easy.
> What do you think?

Can you let it connect only to ports that it itself is listening on? I
can't think of any obvious reason tests should be allowed to talk to
anything else.

-- 
Ciaran McCreesh
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://lists.exherbo.org/pipermail/exherbo-dev/attachments/20090825/9ae91e30/attachment.pgp>


More information about the Exherbo-dev mailing list