mirror of
https://github.com/RGBCube/serenity
synced 2025-05-16 07:04:58 +00:00
8e16588757
This utility essentially creates a filesystem sandbox for a specified command, so it can be tested with only the unveiled paths the user specifies beforehand.
29 lines
704 B
Markdown
29 lines
704 B
Markdown
## Name
|
|
|
|
unveil - unveil certain paths when running a command
|
|
|
|
## Synopsis
|
|
|
|
```**sh
|
|
$ unveil [--path] [command...]
|
|
```
|
|
|
|
## Description
|
|
|
|
Run a command under certain path restrictions by using [`unveil`(2)](help://man/2/unveil).
|
|
|
|
## Options
|
|
|
|
* `-u`, `--path`: Unveil a path, with the format of `permissions,path`
|
|
|
|
## Examples
|
|
|
|
Run `ls -la /sys/kernel` with restricted access to certain paths:
|
|
```sh
|
|
$ unveil --path=r,/etc/timezone --path=r,/usr/lib --path=r,/sys/ --path=r,/etc/passwd --path=r,/etc/group ls -la /sys/kernel
|
|
```
|
|
|
|
Run `ps -ef` with restricted access to certain paths:
|
|
```sh
|
|
$ unveil --path=r,/etc/timezone --path=r,/usr/lib --path=r,/sys/ --path=r,/etc/passwd --path=r,/etc/group ps -ef
|
|
```
|