3 ms·
Is there any reason to continue using process-level sandboxing if this approach is available? It sounds like WASI adds an extra layer of security even beyond p
by daxfohl 7y ago
Is there any reason to continue using process-level sandboxing if this approach is available? It sounds like WASI adds an extra layer of security even beyond process-level sandboxing by being able to limit access to system resources. Or is access to system resources really not the concern here / can you do that just as easily with process-level sandboxing?
And you can pass callback functions to sandboxes, which IDK if you can do with separate processes. Does process-level sandboxing provide any advantages WASI doesn't?