4 ms·
To be honest it seems like writing a capnproto rpc around the functionality you want to sandbox, and running it as a low privilege microservice, would be better
by nly 5y ago
To be honest it seems like writing a capnproto rpc around the functionality you want to sandbox, and running it as a low privilege microservice, would be better than SAPI.
capnproto supports passing callacks/interfaces back via its capabilities mechanism.
- ithkuil 5y agobut you'd have to manually define such an rpc wrapper IDL, right? IIUC the interesting trick behind SAPI is that it generates the wrapper for you based on parsing the library public API. Perhaps I misunderstood something.