Webmasters Stack Exchange is a question and answer site for webmasters. It only takes a minute to sign up.
Sign up to join this community
Is it possible to entirely sandbox a folder on linux? This is because certain users will be able to upload any files they want to this folder and execute PHP scripts (which in turn can execute more harmful code they upload).
Is it possible to entirely block access of things inside the folder from accessing external resources?
I would personally recommend installing a Linux System Container Manager, such as LXD, to set up a Linux Container on your server to isolate the folder from the rest of the system.
DigitalOcean has a really great guide on how to set up LXD on Ubuntu 16.04:
https://www.digitalocean.com/community/tutorials/how-to-set-up-and-use-lxd-on-ubuntu-16-04
This will block users from accessing external resources not in the container.
