From owner-freebsd-questions@FreeBSD.ORG  Sat Jan  9 09:58:28 2010
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 6E4581065692
	for <freebsd-questions@freebsd.org>;
	Sat,  9 Jan 2010 09:58:28 +0000 (UTC)
	(envelope-from jozsi.avadkan@gmail.com)
Received: from ey-out-2122.google.com (ey-out-2122.google.com [74.125.78.24])
	by mx1.freebsd.org (Postfix) with ESMTP id 03EA88FC15
	for <freebsd-questions@freebsd.org>;
	Sat,  9 Jan 2010 09:58:27 +0000 (UTC)
Received: by ey-out-2122.google.com with SMTP id 22so1535661eye.9
	for <freebsd-questions@freebsd.org>;
	Sat, 09 Jan 2010 01:58:23 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:received:received:subject:from:to:content-type
	:date:message-id:mime-version:x-mailer:content-transfer-encoding;
	bh=SuxuWt0DwoViviuKY+HHPNBfh+u2Nw5k2uHWzueZAOw=;
	b=PCW5X1tWizDQ/DvJlIZV4coH52CeDu1Zaq6lbJThNI9ZjWsTEgniSSGmKhhSL7ubPC
	ZIWrDJLCfMtJMXdCyL3I/oVe4r+vMJloLz+aKBYvCk21F9CvWY371jw7MkjdW+n/jUz0
	EIc2RGcbHs/FeDQv+kVe6fmjFWwggswI6TCJ8=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=subject:from:to:content-type:date:message-id:mime-version:x-mailer
	:content-transfer-encoding;
	b=N+io8D4O35xctAgx6HREwypiJftYe25tNIWYNw0O1CYmM1RP4WLad+J6RzVqIuGTin
	Qr5WrNNHKhJItOTP63lDuKH5l3Sq0AfZDGb9Oqh94mLhuHOnFrJzV1Q0Jijco1G2ymDu
	o8EpVOJ/KMaatVCJr2+eRuevwNkRqCZQ1nMSw=
Received: by 10.213.100.13 with SMTP id w13mr2969082ebn.15.1263029208146;
	Sat, 09 Jan 2010 01:26:48 -0800 (PST)
Received: from ?94.44.9.142? (apn-94-44-9-142.vodafone.hu [94.44.9.142])
	by mx.google.com with ESMTPS id 15sm2723273ewy.8.2010.01.09.01.26.47
	(version=SSLv3 cipher=RC4-MD5); Sat, 09 Jan 2010 01:26:47 -0800 (PST)
From: Vadkan Jozsef <jozsi.avadkan@gmail.com>
To: FreeBSD Mailing list <freebsd-questions@freebsd.org>
Content-Type: text/plain
Date: Sat, 09 Jan 2010 10:26:44 +0100
Message-Id: <1263029204.27527.21.camel@ubuntu>
Mime-Version: 1.0
X-Mailer: Evolution 2.26.1 
Content-Transfer-Encoding: 7bit
Subject: chroot a few apps
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 09 Jan 2010 09:58:28 -0000

Hi.

What kind of chroot should I use, if I want to make a more secured
desktop, running e.g.:

pdf reader
webbrowser
audio player
video player
openoffice
picture viewer
mua
ooo
virtualbox

e.g.: if theres a javascript vulnerability in google chrome [I haven't
heard a NoScript extension for it :( ] a chroot would be good for
stopping it from doing something bad with the whole system.

or e.g.: I have to open a .doc file, that I don't trust, or a PDF can
contain malicious code :(

Any tips/docs/howtos?

Thank you!