A portable version of OpenBSD's privdrop/sandboxed file(1) utility
Switch branches/tags
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
CVS
compat
magdir
.gitignore
LICENSE
Makefile
Makefile.am
README
autogen.sh
configure.ac
file.1
file.1.pdf
file.c
file.h
magic
magic-common.c
magic-dump.c
magic-load.c
magic-test.c
magic.5
magic.5.pdf
magic.h
seccomp-sandbox.c
text.c
xmalloc.c
xmalloc.h

README

This is an UNOFFICIAL version of Nicholas Marriott's new privsep file(1)
implementation for OpenBSD (..introduced in 5.8); portability changes
were written by me, brynet@. General bug fixes should be reported to the
OpenBSD mailing lists and tested against the latest CVS version.

* Linux seccomp-bpf sandbox support derived from portable OpenSSH.

Quick/dirty build & install instructions for Linux (glibc):
	$ sudo useradd -r -s /usr/sbin/nologin _file
	$ ./configure && make && sudo make install
	$ sudo install -b -c -o root -g root -m 444 ./magic /etc/magic

This project makes no attempt at coexisting with other file(1)
implementations. Take note before installing system wide.

Any bugs introduced in this porting effort are mine.