3 ms·
why not add an android-style permission flags on nodeJS? eg) nodejs profile with: - exec disabled - file write access limited to ./tmp, ./docs, ./tests - fi
by devwinportable 9y ago
why not add an android-style permission flags on nodeJS?
eg) nodejs profile with:
- exec disabled
- file write access limited to ./tmp, ./docs, ./tests
- file read access limited to ./tmp, ./docs
- network listening: port 1000~11000 allowed
And why not have a 'sesame points' system for dependencies?
eg)
- ownership-change within 3 weeks: -20 points,
- static analysis finds something wrong: -20 points
- badges: 'file-read badge', 'exec-badge', etc.
- mAritz 9y agoIsn't the first part of your suggestion handled on OS level anyways? Aka. restricted user access, SELinux, AppArmor etc.