Confine services in a limited environment

Compartment was designed to allow safe execution of privileged and/or untrusted executables and services. It can execute a process:

 - Setting specific Linux capabilities
 - Chrooting it to a certain location
 - setting the user or group it will run with
 - running a program before it is executed

These features can be used to minimize the risk of a trojanized or vulnerable program/service.

標籤: 系統管理: 使用者管理, 使用者介面: 命令行, 角色: role::program, scope::utility, Purpose: 監看, 處理: 執行中的程式

本頁其他語言版本如下（如何設定預設文件語言）：