4 ms·
I don't think there are many languages where you can give certain permissions (e.g. r/w access to a directory, or TCP connection to a certain host) just to a si
by icebraining 6y ago
I don't think there are many languages where you can give certain permissions (e.g. r/w access to a directory, or TCP connection to a certain host) just to a single library in the application, in a way that can be enforced at runtime.
- jayd16 6y agoWhat does this secure? The same party controls both the main app and the sidecar so the assumption is an attacker can break into the main app only?
- marmaduke 6y agoI think this misses the point. The author of the operator delivers software as the operator + sidecar and a different can deliver a different software as the main app being operated and sidecar'd. Imagine you only want to write a REST API without worrying about DB, for example. An operator manages you DB cluster and REST API server scaling
- icebraining 6y ago> the assumption is an attacker can break into the main app only? Yeah, the idea is that the main app is more vulnerable (both due to being more exposed, and also because it's often more complex), hence it should have very limited permissions into the internal infra. This approach is also used in other situations, like browsers, where the process that processes website content is very locked down, and can only perform actions in the system (network, filesystem, etc) through a limited channel to an outside process.