blocks|key|1282577|text|了解有关API挂钩的内容，例如sandboxie挂钩内核来过滤对文件系统的所有api调用并将其结果重定向到沙箱，您可以挂起api并过滤它，只传递有效的参数，返回无效调用的错误|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|1282578|对于API挂钩，您可以在网络上找到大量的资料，在codeproject.com上试用。|1282579|entityMap^0|F|9|0|0^^$0|@$1|2|3|4|5|6|7|J|8|@$9|K|A|L|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|M|8|@]|D|@]|E|$]]|$1|H|3|-4|5|6|7|N|8|@]|D|@]|E|$]]]|I|$]]

read about API hooking, for example sandboxie hooks Windows kernel to filter all api calls to filesystem and redirects it results to sandbox, you could hook APIs and filter it, pass only valid parameters, return errors for invalid calls

for API hooking you will find plenty materials on the net, try on codeproject.com

blocks|key|1282665|text|谷歌的Chromium使用沙箱，并有一些关于它的文档：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1282666|http://dev.chromium.org/developers/design-documents/sandbox|unordered-list-item|offset|length|1282667|http://code.google.com/p/chromium/wiki/LinuxSandboxing|1282668|entityMap|0|LINK|mutability|MUTABLE|url|1^0|0|0|1N|0|0|0|1I|1|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|R|8|@]|9|@$E|S|F|T|1|U]]|A|$]]|$1|G|3|H|5|D|7|V|8|@]|9|@$E|W|F|X|1|Y]]|A|$]]|$1|I|3|-4|5|6|7|Z|8|@]|9|@]|A|$]]]|J|$K|$5|L|M|N|A|$O|C]]|P|$5|L|M|N|A|$O|H]]]]

Google's Chromium uses sandboxing and has several documents about it:

<ul>
<li><a href="http://dev.chromium.org/developers/design-documents/sandbox" rel="nofollow noreferrer">http://dev.chromium.org/developers/design-documents/sandbox</a></li>
<li><a href="http://code.google.com/p/chromium/wiki/LinuxSandboxing" rel="nofollow noreferrer">http://code.google.com/p/chromium/wiki/LinuxSandboxing</a></li>
</ul>

blocks|key|1170328|text|您还可以查看FreeBSD监狱。这些是沙箱的FreeBSD等价物。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1170329|监狱的源代码是可用的(尽管您也必须了解FreeBSD代码的其余部分)。|1170330|entityMap|0|LINK|mutability|MUTABLE|url|http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/jails.html|1|http://www.freebsd.org/cgi/cvsweb.cgi/src/usr.sbin/jail/^0|6|9|0|0|0|6|1|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@$A|Q|B|R|1|S]]|C|$]]|$1|D|3|E|5|6|7|T|8|@]|9|@$A|U|B|V|1|W]]|C|$]]|$1|F|3|-4|5|6|7|X|8|@]|9|@]|C|$]]]|G|$H|$5|I|J|K|C|$L|M]]|N|$5|I|J|K|C|$L|O]]]]

You might also look at <a href="http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/jails.html" rel="nofollow noreferrer">jails in FreeBSD</a>. These are the FreeBSD equivalent of sandboxes.

The <a href="http://www.freebsd.org/cgi/cvsweb.cgi/src/usr.sbin/jail/" rel="nofollow noreferrer">source code for jail</a> is available (though you'll have to understand the rest of the FreeBSD code as well.)

blocks|key|1170368|text|一个简单的沙箱将只是一个环境，让‘某物’执行，但限制它可以做什么。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1170369|通常，这种“东西”是一种已经存在的语言，如Java、JavaScript、C#或本机代码。Java为applet等提供了“沙箱”apis，.NET具有不同的“信任”级别，JavaScript有解释器(浏览器)对其设置的界限。|1170370|因此，“编写”您自己的沙箱有点奇怪，除非您也有一种您想要的沙箱语言。|1170371|你有这样的语言吗？具体而言，你想了解什么？|1170372|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|J|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|K|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|L|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|M|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|I|$]]

A simple sandbox would simply be an environment in which you let 'something' execute, but restrict what it can do.

Typically, this "something" is an already-existing language, like Java, or JavaScript, or C#, or native code. Java has 'sandboxing' apis for applets and so on, and .NET has various 'trust' levels, JavaScript has the bounds placed on it by the interpreters (browsers).

So it's a little weird to "write" your own sandbox unless you also have a language you want to sandbox.

Do you have such a language? What do you want to learn about, specifically?

blocks|key|1170391|text|这取决于你想要什么沙箱。如果它是一个具有多种接口/语言的成熟系统，那么您真的不想重新发明轮子，而是在VirtualBox、QEmu或其他一些选择中运行虚拟机。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1170392|无论如何，沙箱是，至少在某种程度上是您应该运行的系统的虚拟化.|style|BOLD|1170393|如果您需要为一种(解释的)语言对应用程序进行沙箱化，那么修改解释器听起来就像一种明智的方法。|1170394|entityMap|0|LINK|mutability|MUTABLE|url|http://www.virtualbox.org/|1|http://qemu.org/|2|http://en.wikipedia.org/wiki/Comparison_of_platform_virtual_machines^0|1E|A|0|1P|4|1|1U|6|2|0|7|1|0|0^^$0|@$1|2|3|4|5|6|7|V|8|@]|9|@$A|W|B|X|1|Y]|$A|Z|B|10|1|11]|$A|12|B|13|1|14]]|C|$]]|$1|D|3|E|5|6|7|15|8|@$A|16|B|17|F|G]]|9|@]|C|$]]|$1|H|3|I|5|6|7|18|8|@]|9|@]|C|$]]|$1|J|3|-4|5|6|7|19|8|@]|9|@]|C|$]]]|K|$L|$5|M|N|O|C|$P|Q]]|R|$5|M|N|O|C|$P|S]]|T|$5|M|N|O|C|$P|U]]]]

This is very dependent on what do you want to sandbox. If it is a full-blown system with multiple interfaces/languages available, you really do not want to re-invent the wheel, but run a virtual machine in <a href="http://www.virtualbox.org" rel="nofollow noreferrer">VirtualBox</a>, <a href="http://qemu.org" rel="nofollow noreferrer">QEmu</a> or <a href="http://en.wikipedia.org/wiki/Comparison_of_platform_virtual_machines" rel="nofollow noreferrer">some other alternative</a>

In any case, a sandbox IS, at least on some level a virtualization of the system you are 'supposed to be' running...

If you need to sandbox applications for a single (interpreted) language, modifying the interpreter sound like a sensible approach.

blocks|key|1170313|text|答案很可能是语言上的。不幸的是，大多数语言都没有内置的沙箱功能。但是函数式语言往往足够强大，可以从头开始构建，而无需扩展语言。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1170314|在Tcl中，基本机制是创建从解释器：|1170315|interp+create+-safe+sandbox
interp+eval+sandbox+$set_up_code
set+result+[interp+eval+sandbox+$unsafe_code]|code-block|syntax|javascript|1170316|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|L|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|M|8|@]|9|@]|A|$G|H]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

The answer will likely be language specific. Unfortunately most languages don't have built-in sandboxing capabilities. But functional languages tend to be powerful enough that one can be built from scratch without extending the language.

In Tcl the basic mechanism is to create slave interpreters:

<pre><code>interp create -safe sandbox
interp eval sandbox $set_up_code
set result [interp eval sandbox $unsafe_code]
</code></pre>

blocks|key|1282727|text|前几天我写了一个Linux中的沙箱方法综述，它链接到许多不同技术的参考资料。类似的方法也适用于其他操作系统。我希望这是有帮助的-我也找不到更全面的文档。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1282728|entityMap|0|LINK|mutability|MUTABLE|url|http://blog.technologyofcontent.com/2011/04/sandboxing-for-multi-tenant-applications/^0|8|D|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

I wrote an <a href="http://blog.technologyofcontent.com/2011/04/sandboxing-for-multi-tenant-applications/" rel="nofollow">overview of the ways of sandboxing within Linux</a> the other day, which links to a lot of references for the different techniques. Similar methods are applicable in other operating systems. I hope it is helpful - I couldn't find much comprehensively documented either.

I want to learn more about sandboxing. Not just about it. I want to learn such that I will be able to write a simple sandbox.

Surprisingly, there isn't any information available anywhere. Even the Wikipedia article is not good.

Can any one please suggest me good material. I know that its very advanced level concept. So, what are the prerequisites for learning &amp; mastering it.

Want to learn about Sandboxing

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我想了解更多关于太极拳的知识。不只是为了这个。我想学习，这样我就可以编写一个简单的沙箱了。令人惊讶的是，在任何地方都没有任何信息。即使是维基百科的文章也不是很好。有谁能给我推荐一下好材料吗？我知道这是非常先进的概念。那么，学习和掌握它的先决条件是什么呢？

问想学习太极拳
EN

回答 7

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问想学习太极拳EN

回答 7

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问想学习太极拳
EN