Re: OT chromium/chrome sandbox

2012-03-14 Thread Andrei POPESCU
On Mi, 14 mar 12, 21:20:58, Dan wrote: > > Here you can find the doc for the sandbox: > http://code.google.com/p/chromium/wiki/LinuxSUIDSandbox > http://www.chromium.org/developers/design-documents/sandbox > > And some discussion: > http://scarybeastsecurity.blogspot.com/2009/10/chromium-and-linu

Re: OT chromium/chrome sandbox

2012-03-14 Thread Bob Proulx
Dan wrote: > Andrei POPESCU wrote: > > Dan wrote: > >> Interestingly I noticed that chrome/chromium use some kind of sandbox > >> to isolate the process that renders the page. That is a good idea for > >> security purposes, but it requires to the executable chrome-sandbox to > >> have suid root acc

Re: OT chromium/chrome sandbox

2012-03-14 Thread Dan
On Wed, Mar 14, 2012 at 8:40 PM, Andrei POPESCU wrote: > On Mi, 14 mar 12, 20:09:10, Dan wrote: >> >> Interestingly I noticed that chrome/chromium use some kind of sandbox >> to isolate the process that renders the page. That is a good idea for >> security purposes, but it requires to the executab

Re: OT chromium/chrome sandbox

2012-03-14 Thread Andrei POPESCU
On Mi, 14 mar 12, 20:09:10, Dan wrote: > > Interestingly I noticed that chrome/chromium use some kind of sandbox > to isolate the process that renders the page. That is a good idea for > security purposes, but it requires to the executable chrome-sandbox to > have suid root access. I'm not very

OT chromium/chrome sandbox

2012-03-14 Thread Dan
Hi, I installed chrome and also new version of chromium, but I installed both only for a single user that I only use to use chrome/chromium. I installed chrome in /home/user/opt. Usually I do that with programs that I download from internet. Interestingly I noticed that chrome/chromium use some k