Debian Bug report logs - #664784
RFP: sandbox -- A helper utility to run programs in a sandboxed environment

Package: wnpp; Maintainer for wnpp is wnpp@debian.org;

Reported by: Ivan Krylov <krylov.r00t@gmail.com>

Date: Tue, 20 Mar 2012 20:15:02 UTC

Severity: wishlist

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Information forwarded to debian-bugs-dist@lists.debian.org, debian-devel@lists.debian.org, wnpp@debian.org:
Bug#664784; Package wnpp. (Tue, 20 Mar 2012 20:15:06 GMT) Full text and rfc822 format available.

Acknowledgement sent to Ivan Krylov <krylov.r00t@gmail.com>:
Extra info received and forwarded to list. Copy sent to debian-devel@lists.debian.org, wnpp@debian.org. (Tue, 20 Mar 2012 20:15:12 GMT) Full text and rfc822 format available.

Message #5 received at submit@bugs.debian.org (full text, mbox):

From: Ivan Krylov <krylov.r00t@gmail.com>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: ITP: sandbox -- A helper utility to run programs in a sandboxed environment
Date: Wed, 21 Mar 2012 00:11:43 +0400
Package: wnpp
Severity: wishlist
Owner: Ivan Krylov <krylov.r00t@gmail.com>

* Package name    : sandbox
  Version         : 2.5
  Upstream Author : Gentoo Foundation <vapier@gentoo.org>
* URL             : http://gentoo.org/
* License         : GPL-2.0+
  Programming Lang: C
  Description     : A helper utility to run programs in a sandboxed environment

 Sandbox is a library (and helper utility) to run programs in a "sandboxed"
 environment.  This is used as a QA measure to try and prevent applications from
 modifying files they should not.
 .
 For example, in the Gentoo world it is used for building applications as root
 and being sure that the build system does not do crazy things outside of its
 build directory.  Such as install files to the live root file system or modify
 config files on the fly.
 .
 For people who are familiar with the Debian "fakeroot" project or the RPM based
 "InstallWatch", sandbox is in the same vein of projects.




Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org, Ivan Krylov <krylov.r00t@gmail.com>:
Bug#664784; Package wnpp. (Tue, 20 Mar 2012 23:54:03 GMT) Full text and rfc822 format available.

Acknowledgement sent to Ben Hutchings <ben@decadent.org.uk>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org, Ivan Krylov <krylov.r00t@gmail.com>. (Tue, 20 Mar 2012 23:54:03 GMT) Full text and rfc822 format available.

Message #10 received at 664784@bugs.debian.org (full text, mbox):

From: Ben Hutchings <ben@decadent.org.uk>
To: Ivan Krylov <krylov.r00t@gmail.com>, 664784@bugs.debian.org
Subject: Re: Bug#664784: ITP: sandbox -- A helper utility to run programs in a sandboxed environment
Date: Tue, 20 Mar 2012 23:50:22 +0000
On Wed, Mar 21, 2012 at 12:11:43AM +0400, Ivan Krylov wrote:
> Package: wnpp
> Severity: wishlist
> Owner: Ivan Krylov <krylov.r00t@gmail.com>
> 
> * Package name    : sandbox
>   Version         : 2.5
>   Upstream Author : Gentoo Foundation <vapier@gentoo.org>
> * URL             : http://gentoo.org/
> * License         : GPL-2.0+
>   Programming Lang: C
>   Description     : A helper utility to run programs in a sandboxed environment
> 
>  Sandbox is a library (and helper utility) to run programs in a "sandboxed"
>  environment.  This is used as a QA measure to try and prevent applications from
>  modifying files they should not.
>  .
>  For example, in the Gentoo world it is used for building applications as root
>  and being sure that the build system does not do crazy things outside of its
>  build directory.  Such as install files to the live root file system or modify
>  config files on the fly.
>  .
>  For people who are familiar with the Debian "fakeroot" project or the RPM based
>  "InstallWatch", sandbox is in the same vein of projects.

So why do we need this as well as fakeroot?

Ben.

-- 
Ben Hutchings
We get into the habit of living before acquiring the habit of thinking.
                                                              - Albert Camus




Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org:
Bug#664784; Package wnpp. (Wed, 21 Mar 2012 13:54:03 GMT) Full text and rfc822 format available.

Acknowledgement sent to Ivan Krylov <krylov.r00t@gmail.com>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org. (Wed, 21 Mar 2012 13:54:23 GMT) Full text and rfc822 format available.

Message #15 received at 664784@bugs.debian.org (full text, mbox):

From: Ivan Krylov <krylov.r00t@gmail.com>
To: Ben Hutchings <ben@decadent.org.uk>
Cc: 664784@bugs.debian.org
Subject: Re: Bug#664784: ITP: sandbox -- A helper utility to run programs in a sandboxed environment
Date: Wed, 21 Mar 2012 17:50:57 +0400
21.03.2012 03:50, Ben Hutchings wrote:
> So why do we need this as well as fakeroot?
For example, this program can be easily used to run an untrusted or 
buggy blob relatively safely. How can I do this using only fakeroot?

Ivan.




Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org, Ivan Krylov <krylov.r00t@gmail.com>:
Bug#664784; Package wnpp. (Wed, 21 Mar 2012 18:45:03 GMT) Full text and rfc822 format available.

Acknowledgement sent to Ben Armstrong <synrg@sanctuary.nslug.ns.ca>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org, Ivan Krylov <krylov.r00t@gmail.com>. (Wed, 21 Mar 2012 18:45:03 GMT) Full text and rfc822 format available.

Message #20 received at 664784@bugs.debian.org (full text, mbox):

From: Ben Armstrong <synrg@sanctuary.nslug.ns.ca>
To: Ivan Krylov <krylov.r00t@gmail.com>, 664784@bugs.debian.org
Subject: Re: Bug#664784: ITP: sandbox -- A helper utility to run programs in a sandboxed environment
Date: Wed, 21 Mar 2012 15:12:55 -0300
On 03/20/2012 05:11 PM, Ivan Krylov wrote:
> Package: wnpp
> Severity: wishlist
> Owner: Ivan Krylov<krylov.r00t@gmail.com>
>
> * Package name    : sandbox

I worry about how generic this name is. I know of at least 
'sandboxgamemaker' package (Platinum Arts Sandbox) which was renamed to 
avoid conflicts. Please also note 'policycoreutils' contains 
/usr/bin/sandbox. Perhaps this package (and any program of the same name 
it contains) should be too? Though, I can't think of a suitable suffix 
off the top of my head -- reviewing the package is hard for me due to my 
next complaint ...

> * URL             : http://gentoo.org/

I wanted to check this package upstream, not search all day through the 
gentoo site for it. Help me out, please?

Thanks,
Ben




Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org:
Bug#664784; Package wnpp. (Wed, 21 Mar 2012 19:45:06 GMT) Full text and rfc822 format available.

Acknowledgement sent to Ivan Krylov <krylov.r00t@gmail.com>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org. (Wed, 21 Mar 2012 19:45:06 GMT) Full text and rfc822 format available.

Message #25 received at 664784@bugs.debian.org (full text, mbox):

From: Ivan Krylov <krylov.r00t@gmail.com>
To: Ben Armstrong <synrg@sanctuary.nslug.ns.ca>
Cc: 664784@bugs.debian.org
Subject: Re: Bug#664784: ITP: sandbox -- A helper utility to run programs in a sandboxed environment
Date: Wed, 21 Mar 2012 23:40:44 +0400
21.03.2012 22:12, Ben Armstrong wrote:
> I worry about how generic this name is.
I was worried too. So the package can be called gentoo-sandbox instead 
(sorry, but I don't know how to rename the package in an ITP bug).
> I wanted to check this package upstream, not search all day through 
the gentoo site for it. Help me out, please?
The source can be found at http://dev.gentoo.org/~vapier/dist/ (the 
latest version is 
http://dev.gentoo.org/~vapier/dist/sandbox-2.5.tar.xz), and 
http://gentoo.org/ is mentioned as homepage in the ebuild (and 
everywhere I searched for it). I tried to google deeper, but found 
nothing that looked like the program website.

Best regards,
Ivan




Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org, Ivan Krylov <krylov.r00t@gmail.com>:
Bug#664784; Package wnpp. (Mon, 27 May 2013 14:20:51 GMT) Full text and rfc822 format available.

Acknowledgement sent to Lucas Nussbaum <lucas@debian.org>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org, Ivan Krylov <krylov.r00t@gmail.com>. (Mon, 27 May 2013 14:20:51 GMT) Full text and rfc822 format available.

Message #30 received at 664784@bugs.debian.org (full text, mbox):

From: Lucas Nussbaum <lucas@debian.org>
To: 664784@bugs.debian.org
Cc: control@bugs.debian.org
Subject: sandbox: changing back from ITP to RFP
Date: Mon, 27 May 2013 15:24:11 +0200
retitle 664784 RFP: sandbox -- A helper utility to run programs in a sandboxed environment
noowner 664784
tag 664784 - pending
thanks

Hi,

This is an automatic email to change the status of sandbox back from ITP
(Intent to Package) to RFP (Request for Package), because this bug hasn't seen
any activity during the last 12 months.

If you are still interested in adopting sandbox, please send a mail to
<control@bugs.debian.org> with:

 retitle 664784 ITP: sandbox -- A helper utility to run programs in a sandboxed environment
 owner 664784 !
 thanks

However, it is not recommended to keep ITP for a long time without acting on
the package, as it might cause other prospective maintainers to refrain from
packaging that software. It is also a good idea to document your progress on
this ITP from time to time, by mailing <664784@bugs.debian.org>.

Thank you for your interest in Debian,
-- 
Lucas, for the QA team <debian-qa@lists.debian.org>



Changed Bug title to 'RFP: sandbox -- A helper utility to run programs in a sandboxed environment' from 'ITP: sandbox -- A helper utility to run programs in a sandboxed environment' Request was from Lucas Nussbaum <lucas@debian.org> to control@bugs.debian.org. (Mon, 27 May 2013 14:24:36 GMT) Full text and rfc822 format available.

Removed annotation that Bug was owned by Ivan Krylov <krylov.r00t@gmail.com>. Request was from Lucas Nussbaum <lucas@debian.org> to control@bugs.debian.org. (Mon, 27 May 2013 14:24:37 GMT) Full text and rfc822 format available.

Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org:
Bug#664784; Package wnpp. (Thu, 26 Sep 2013 12:45:04 GMT) Full text and rfc822 format available.

Acknowledgement sent to Marcin Kulisz <debian@kulisz.net>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org. (Thu, 26 Sep 2013 12:45:04 GMT) Full text and rfc822 format available.

Message #39 received at 664784@bugs.debian.org (full text, mbox):

From: Marcin Kulisz <debian@kulisz.net>
To: 664784@bugs.debian.org
Cc: Ivan Krylov <krylov.r00t@gmail.com>
Subject: Any activities on this project?
Date: Thu, 26 Sep 2013 13:08:06 +0100
[Message part 1 (text/plain, inline)]
Hi,
looks like I'll need this stuff (sandbox) for my work, So I'm prepared to
package it and find sponsor.

Is anybody working on it right now?
-- 

|_|0|_|                                          |
|_|_|0|         "Heghlu'Meh QaQ jajVam"          |
|0|0|0|         -------- kuLa ---------          |

gpg --keyserver pgp.mit.edu --recv-keys 0x58C338B3
3DF1 A4DF C732 4688 38BC F121 6869 30DD  58C3 38B3
[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Mon Apr 21 10:13:19 2014; Machine Name: buxtehude.debian.org

Debian Bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.