David Mirza Ahmad

@kibal

Idea for an implementation that's very simple: Oz profile gets two new fields: derivative: [original program name] And maybe, optionally: derivative-exec-path: [path to program exec] When oz-setup install runs, it...

Openvpn client can be run in a lower privileged mode, with the tun interface set to sandbox netns. then, if the ip address / peer of the tun device is...

So TODO on this: we need to write an if-up that openvpn calls when the IP address changes. This would run as gid oz-openvpn (which it would inherit from openvpn...

I wrote code in Oz to do it, but it isn't finished. I should get on that. What I added was support for cgroups in sandboxes (to whitelist device major/minor...

Reproduced what was probably an instance of this with Tor Browser w/many tabs all loading pages at once. Log output: Apr 30 21:24:53 subgraph oz-daemon[5385]: 2016/04/30 21:24:53 Socket: accept tcp...