oz icon indicating copy to clipboard operation
oz copied to clipboard

OZ: a sandboxing system targeting everyday workstation applications

Results 70 oz issues
Sort by recently updated
recently updated
newest added

Hi, as discussed in other places (e.g. - https://english.stackexchange.com/questions/51088/alternative-term-to-blacklist-and-whitelist - https://github.com/graphite-project/graphite-web/issues/1569 - https://github.com/whatwg/html/pull/281 ) it would be nice to replace the terms _blacklist_ and _whitelist_ by more suitable ones. Commonly...

Hi, I'm testing the oz on a debian virtual machine running on parallels the debian version as: `Linux debian-gnu-linux-vm 4.9.0-3-amd64 #1 SMP Debian 4.9.30-2+deb9u3 (2017-08-06) x86_64 GNU/Linux ` After installing...

This pull request was made with an automated tool. The suggested change fixes one or more problems discovered by "go vet". See https://github.com/functionary/functionary for more details on the @functionary GitHub...

I'm using Firefox 58.x, from the user prospective everything works fine, except for the fact videos (e.g. Youtube) are continuously interrupted. `oz logs` show: 1. an issue with pyOpenGL (missing...

``` oz-daemon 0.2.4-1 amd64 ``` I think on multiple user systems, the user only works on his sandbox. Don't have any permission on another sandbox of another user.

Hey, I'm trying to port oz to ArchLinux and wrote this PKGBUILD script https://aur.archlinux.org/packages/subgraph-oz/ If I run oz-daemon I get following error: ``` 2018/03/08 01:26:25 Oz Global Config: &{ProfileDir:/var/lib/oz/cells.d ShellPath:/bin/bash...

Allow mount into sandbox of e.g. /tmp/blah, but ask user to confirm with GUI dialog. No dialog for standard Oz bind mounts.

enhancement

Hi. I've experimented creating and installing the following Oz profile for Wire: ``` { "path": "/opt/wire-desktop/wire-desktop" , "xserver": { "enabled": true , "tray_icon":"/usr/share/icons/hicolor/256x256/apps/wire-desktop.png" , "enable_tray": false , "enable_notifications": true }...

i have not tested them intensely, but one can start the application, draw a drawing, and save it to /home/user/Pictures/inkscape/

This might be an interesting feature to add. The biggest challenge is DNS if we want transparent outbound TCP connectivity with something like metaproxy in the sandbox. Cleanest option is...