confinedrv creates a new device node /sdx under /dev/mapper which mirrors the given base drive with certain partitions faded out and other partitions limited to read-only or read-write access. It is commonly used to safely boot an existing OS installation with Qemu or any other virtualization software from the same hard disk as the host operating system has been booted from.
Buck-Security is a security scanner for Debian and Ubuntu Linux. It helps you to harden your system by running some important security checks. For example, it finds world-writable files and directories, setuid and setgid programs, superuser accounts, and installed attack tool packages. It also checks your umask and checks if the sticky bit is set for /tmp, among other checks.