Arch Linux

Alexpin

Member

From: Italy

Registered: 2016-05-11

Posts: 17

Run a jar without compromising security

Hello,

I need to run a jar file with

java -jar $file

but I am reluctant to do so on my system for fear of compromising its security.

Apart from running it in a live system on a usb with my SSD physically unplugged (my current solution), isn't there a more "sane" way?

Thanks in advance.

Scimmia

Fellow

Registered: 2012-09-01

Posts: 13,726

Re: Run a jar without compromising security

A virtual machine would be more sane, but why would you have to run a file you suspect is a security risk?

brebs

Member

Registered: 2007-04-03

Posts: 3,742

Re: Run a jar without compromising security

The likes of AppArmor and firejail can be used to prevent an app from misbehaving (which mostly means reading/writing files).

Slithery

Administrator

From: Norfolk, UK

Registered: 2013-12-01

Posts: 5,776

Re: Run a jar without compromising security

Or an LXC container, or a chroot, or systemd-nspawn.

There are lots of options available to you.

---

No, it didn't "fix" anything. It just shifted the brokeness one space to the right. - jasonwryan
Closing -- for deletion; Banning -- for muppetry. - jasonwryan

aur - dotfiles

Alexpin

Member

From: Italy

Registered: 2016-05-11

Posts: 17

Re: Run a jar without compromising security

The jar contains proprietary, web-facing software. As a matter of fact I may try decompiling it, but it's huge and there's no way I can scan its code to check its safety.

Thank you all for your tips, I will look into them.

ewaller

Administrator

From: Pasadena, CA

Registered: 2009-07-13

Posts: 20,638

Re: Run a jar without compromising security

Or a Raspberry Pi running Linux if you want to run it on bare metal.

---

Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
The shortest way to ruin a country is to give power to demagogues.— Dionysius of Halicarnassus
---
How to Ask Questions the Smart Way