CrunchBang Linux, encryption, sandboxing

[zorlack]

hi y'all, this is now the Linux Distro I run on most of my machines:
http://crunchbang.org/

this page has some good info too:
https://debianhelp.wordpress.com/2012/10/02/crunchbang-11-waldorf-debian-wheezy-os/

Sandfox is a cool sandboxing script...I've got my browser, xchat, vlc sandboxed just in case...likewise I am also gonna try to figure out getting my forex trading software under WINE sandboxed too
http://igurublog.wordpress.com/downloads/script-sandfox/

oh yeah I run LUKS/LVM full disk encryption on all my systems...I never encountered this problem before, recently I had to access an old system disk via new install on SSD in same machine...up pops a conflicting hostname disk volumename issue...this info cleared it up so I could mount my old encrypted home dir:
http://www.cyberciti.biz/faq/warning-duplicate-vg-name-server01-error/

anyway I just run the SSD, and symbolic link to a few bulky programs on harddrive...and only plug in & mount harddrive as needed for junk like bitcoin-qt which is over 16GB alone now, or to access my bigger mediafile archives.

later

 

[zorlack]

in case anyone else is concerned about sandboxing Windows apps on Linux running in WINE...

I figured out that I had to escape the quotes for my forex trading software to run in the sandbox:
sudo sandfox --user YourLogonUserName --sandbox wine --profile /etc/sandfox/wine.profile wine \"/home/YourLogonUserName/.wine/drive_c/Program Files/OANDA - MetaTrader/terminal.exe\"

however, when I do a ps command in the shell to display related processes:

/bin/su YourLogonUserName -c wine "/home/YourLogonUserName/.wine/drive_c/Program Files/OANDA - MetaTrader/terminal.exe"
\_ /home/YourLogonUserName/.wine/drive_c/Program Files/OANDA - MetaTrader/terminal.exe
/usr/lib/i386-linux-gnu/wine/wineserver
C:\windows\system32\services.exe
C:\windows\system32\winedevice.exe MountMgr
C:\windows\system32\plugplay.exe
C:\windows\system32\explorer.exe /desktop

not sure about the related WINE processes below it...therefore I will just leave as-is for now, and muck around with making an AppArmor profile for WINE.

cya