3 ms·
What existing sandboxing systems are you thinking of that are more efficient? Would you be confident using them to run possibly malicious code on your system?
by alexhutcheson 6y ago
What existing sandboxing systems are you thinking of that are more efficient?
Would you be confident using them to run possibly malicious code on your system?
- shakna 6y agoBSD jails? I'd be quite confident running possibly dangerous code in one of the most restricted jail configs. Processes can't interact, can't access outside their given directories, can't modify devices, etc.
- deleted 6y ago[deleted]
- higerordermap 6y ago>> because every other OS sucks at sandboxing And I won't be confident using browser too. Pretty sure at any given time there will be quite a few javascript/wasm attacks which can escape browser sandbox and run arbitrary code, then my files won't be safe. When I am running potentially malicious website I am creating a separate user on my linux box anyway.