Technical question about permission access

Fulgurance · Veteran Joined: 15 Feb 2017 Posts: 1260

Hi guys, I have a specific question .

For example when a command will be run, first the system will check if the user have the required access to run it, and then the program can access to the files if it is allowed.

So my question is: is it possible for example to run a program just before this right access check ? Basically I would like to code an additional security layer .

Is it possible to do this ?
_________________
My actual project: https://github.com/Fulgurance/ISM

Ingenius Software Manager is a tool to build and manage a Linux system from scratch.
It will able to manage a linux installation just with a given path to the futur root path

sublogic · Posted: Tue Mar 11, 2025 10:41 pm Post subject:

Something along the lines of sys-apps/sandbox , perhaps? You can check the README file for ideas.

szatox · Advocate Joined: 27 Aug 2013 Posts: 3550

Specific questions are the best kind of questions :lol:

No idea about that "running code before checking permissions on your program" part, but it seems to me that you're looking for stuff like selinux or apparmor. Or, yes, sandbox, though userspace sandbox must be inferior to an in-kernel enforcer.
_________________
Make Computing Fun Again