Quote:
Originally Posted by bsdcord
Hi,
I need to put a browser in a chroot environment...
|
The chromium browser on OpenBSD can use the unveil(2) system call to restrict filesystem access. This facility was added after 6.4-release, and will be the default for the upcoming 6.5-release. As a chromium browser user, you will have to run the application with the "--disable-unveil" option if you want to eliminate this restriction.
Chromium will be restricted to directories that it is supposed to be able to access, such as local cached web page data and the
$HOME/Downloads directory.