Re: nsmux Documentation

[Carl Fredrik Hammar]

Hi,

On Thu, Oct 01, 2009 at 07:52:57PM +0300, Sergiu Ivanov wrote:
> On Wed, Sep 30, 2009 at 09:45:32PM +0200, Arne Babenhauserheide wrote:
> > Am Mittwoch, 30. September 2009 18:36:34 schrieb Sergiu Ivanov:
> > > > It reads nice, but I miss an info: How can I activate nsmux, so I
> > > > can use the magic filenames?
> > > 
> > > Thank you for pointing out! :-) 
> > 
> > Can I also put it "on /"? 
> > That way I could activate it systemwide :) 
> 
> Yes, this is the long-term goal, though I definitely won't advise you
> trying this out ATM -- one of the most important issues is security,
> about which nsmux does nothing but standard procedures, but it is
> possible that something more is required.

A secure way to use it on the entire filesystem would be to make use of
settrans -C flag, to start a shell chrooted to nsmux but not actually set
on /.  This way only programs started from the shell would be affected.

That is something like:

  settrans -C bash -- / nsmux ...

(I didn't test it, it might be the other way around.)

Regards,
  Fredrik