Package Details: sandfox 20131104-1

Package Base: sandfox
Description: Runs Firefox and other apps in a sandbox with limited access to the filesystem
Upstream URL: http://igurublog.wordpress.com/downloads/script-sandfox/
Category: system
Licenses: GPL3
Submitter: IgnorantGuru
Maintainer: Matteotom
Last Packager: None
Votes: 32
First Submitted: 2010-02-02 19:07
Last Updated: 2013-11-05 07:15

Latest Comments

Comment by dkaparis

2015-02-18 11:51

@promike, @piluke

It appears the problem is the link structure of the various lib folders is not recreated correctly in chroot.

In the host /lib is a symlink to /usr/lib, which contains ld-linux.so.2, which is a link to ../lib32/ld-linux.so.2 (resolved correctly to the actual location /usr/lib32/ld-linux.so.2)

In the chroot environment, however, /lib is not a symlink, resulting in /lib/ld-linux.so.2 being a broken link and as a result 32-bit applications do not load.

Having said that, I'm not sure how to solve the problem. I don't know of any way to recreate the /lib symlink from sandfox and I'm not willing to modify the symlinks set up by the system within.

Any ideas?

Comment by piluke

2014-12-11 02:10

@promike I'm having the same problem but I haven't made any changes to the defaults. I have a /lib32 folder but all of the required libraries listed from ldd exist in the chroot. Has anyone found a fix for it?

Comment by promike

2014-09-16 12:14

I have a 64bit machine and sandfox doesn't work that well with skype.

After sudo sandfox --verbose --profile=skype; sandfox skype
I get /usr/bin/skype: line 13: /usr/lib32/skype/skype: No such file or directory. I can confirm I have a skype file in the /mnt/sandfox/skype/usr/lib32/skype directory.
Needless to say skype works without sandfox.
The only change what I have made is in the default and skype profile. I have no /lib32 folder, I have /lib and /lib64.I commented out that one (and I add /lib) and lastly the echo $user gives me nothing, so I changed them to $USER.
Does anyone know what the problem is? I can't figure it out

Comment by Matteotom

2013-11-05 07:16

@scattbrain: it should be fixed

Comment by scattbrain

2013-11-05 07:09

I don't know if is related to you, however... using the git describe function to retrieve the pkgver the obtained value is "gdad04f9" while the $pkgver in the manifest is "20131018". So my AUR helper (pacaur) thinks the package was updated every time

Comment by IgnorantGuru

2013-10-18 19:39

Thanks for the PKGBUILDs and sorry for the delay. I have changed it to XOrg's one but haven't tested it. I'm going to orphan this now in case anyone wants to maintain it. If it's not picked up then I'll own it again next time I need to make a change.

I left the --depth 1 in but if that is causing problems with this new PKGBUILD it can be removed.

Comment by Xorg

2013-07-12 09:58

I have written a new PKGBUILD : https://gist.github.com/X0rg/5983234
It is more in harmony with : https://wiki.archlinux.org/index.php/Arch_CVS/SVN_PKGBUILD_guidelines

Comment by ilikenwf

2013-06-10 21:24

Seems that the --depth 1 is breaking it for me here, breaks the build.

Comment by Gently

2013-04-19 02:10

Cleaned up PKGBUILD a little:

https://gist.github.com/7b252ea656b38b858cb3

Anonymous comment

2011-10-24 19:47

Simple shell script that work flawlessly.

Script create in /mnt/sandfox profiles, which mount read-only binaries (/bin, /etc, /lib, /usr, /var/lib), create new home dir and access to shared /tmp.

Never know that chrooting could be so simple.

All comments