Mitigating the singularity of codebuff: Revisited

· nat's blog

So absolutely easy mode is to just use mulle-sde in the sandbox configuration. This will prevent writing stuff into system files and also will not allow sudo to work.

Then you "just" enter mulle-sde and then run codebuff:

Setting up the mulle-sde sandbox #

  1. Install mulle-sde
  2. Instal lljail to get the lljail command
  3. Copy the installed mulle-sde-sandbox.linux to your ~/bin/ and edit the filepaths in the script (maybe)
  4. Add the following environment variable to your ~/.profile or ~/.bashrc and to your current shell prompt: export MULLE_SDE_SANDBOX="${HOME}/bin/mulle-sde-sandbox.linux"

Run codebuff inside mulle-sde #

Now once inside mulle-sde you run:

1mulle-sde
2> mudo codebuff

You should get a prompt and this will be within the sandbox.

Or create an alias for codebuff #

To run codebuff outside of mulle-sde use the following alias and put it in your ~/.profile or ~/.bashrc as well:

1alias codebuff="${MULLE_SDE_SANDBOX} codebuff"
last updated: