[tuto][security][browser] Here's how to properly operate the sandbox in chromium (and chromium based too)!

[K-mik@Z]

Thanks for sharing, I wouldn't have a clue where to look for it!

Just for fun:

Code: Select all

grep -H 'kernel.yama.ptrace_scope' /etc/sysctl.{c*,d/*}

return:
/etc/sysctl.d/10-securized-yama-scope.conf:kernel.yama.ptrace_scope = 1

( CompleteFilePath + : + Parameter=Value )

then:

Code: Select all

grep -H 'kernel.unprivileged_userns_clone' /etc/sysctl.{c*,d/*}

can give you the config file (/etc/sysctl.conf or one of /etc/sysctl.d/*.conf) and the parameters (if exist)

[K-mik@Z]

Thanks for sharing, I wouldn't have a clue where to look for it!

Just for fun:
...

oops, double post, bad handling, sorry

[Buck Fankers]

Code: Select all

grep -H 'kernel.unprivileged_userns_clone' /etc/sysctl.{c*,d/*}

can give you the config file (/etc/sysctl.conf or one of /etc/sysctl.d/*.conf) and the parameters (if exist)

Nice!

I'm planing for a while to learn some basic bash/grep commands and your example nicely demonstrates it's power. Oh, and syntax is simple also, even for me! Also reinforces the thought I shouldn't delay with this to-do task much longer
Thank you!