4 ms·
Finally, we are seeing more applications pushing chunks of themselves into sandboxed sub-processes. Now if only there was a nice open-source, cross-platform wa
by grandinj 6y ago
Finally, we are seeing more applications pushing chunks of themselves into sandboxed sub-processes.
Now if only there was a nice open-source, cross-platform way to do this..... hint..... hint......
:-)
- saagarjha 6y agoPerhaps I’m too dense to get the hint?
- grandinj 6y agoWhat I mean is, it would be really nice if someone would build such a toolkit - I know the code exists inside things like Chrome and Firefox, but I'm not aware of any standalone libraries that make it easy to (a) create a sandboxed child process with some code inside it (b) talk to that sandboxed child process (e.g. Firefox and Chrome both have IPC libraries) (c) handle the resulting crashes nicely, restarting child process when necessary
- saagarjha 6y agoSadly not possible on iOS. Even on macOS, creating a good sandbox profile is non-trivial (and technically unsupported by Apple).
- HHad3 6y agoOpen source aside, it would be great if any developer could do this on iOS. Unfortunately -- in contrast to macOS -- Apple keeps the XPC API on iOS private, so that it is impossible for "normal" app developers to properly sandbox the more critical and exposed parts of their application. Only Apple can provide the described security for their messenger, but other messengers which face similar challenges (rendering untrusted content) cannot protect themselves.
- my123 6y agoApple doesn't allow subprocesses for 3rd-party apps on iOS generally as far as I know.
- swiley 6y agoGuile has its own sandbox. You can probably also use lua-JIT.