compartment

Confine services in a limited environment

Description

Compartment was designed to allow safe execution of privileged and/or untrusted executables and services. It can execute a process:

- Setting specific Linux capabilities

- Chrooting it to a certain location

- setting the user or group it will run with

- running a program before it is executed

These features can be used to minimize the risk of a trojanized or vulnerable program/service.

Upload more screenshots

Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.

Hint: upload an image here from your clipboard with Ctrl-V

Homepage

Install this software package

If the package is available for the distribution you are currently using on your computer then install the software by clicking on…