Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I have been using PlayOnLinux to run windows programs on Linux. PlayOnLinux creates a virtual drive for each program installed and every VD represents a different Windows XP computer.

Any changes made by the program stay within its own VD only. So if I run a program with a virus I can simply delete the program's VD and all is well.

Is there a similar program that allows Linux programs to be run in a virtual drive? i.e. I want PlayOnLinux/Wine minus the windows emulation.

share|improve this question
1  
wine is not a sandbox; it just so happens that Windows applications don't try to break out onto the system. –  Ignacio Vazquez-Abrams Jan 10 '13 at 7:27
add comment

1 Answer

I cant give you a full answer since I dont know, but what I do know is that the command chroot is designed for similar if not the exact same purpose.

share|improve this answer
1  
chroot is ok for basic security, but you should know that there are ways to break out of a chroot environment. –  Elias Probst Dec 17 '13 at 9:45
    
@EliasProbst oh? I wasnt aware, I am not too familiar with chroot actually –  Karthik T Dec 17 '13 at 10:43
    
That @EliasProbst, plus setting up a chroot jail for non-trivial software can be a headache. It depends on exactly what the software does and how it does it. Server software generally does better in chroot jails than user-oriented software (running BIND in a chroot jail isn't so bad, but I wouldn't try running LibreOffice in a chroot jail, for example...) –  Michael Kjörling Dec 17 '13 at 12:50
    
Using systemd-nspawn or docker this can be achieved really really easy. Not chroot based, but based on LXC instead which is even slightly more secure than a plain chroot and provides better isolation from the host. –  Elias Probst Dec 17 '13 at 14:03
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.