4 ms·
It seems more practical to use BSD’s approach of pledging once in main that the process won’t access the network. Parts of the program that need different capab
by eska 5y ago
It seems more practical to use BSD’s approach of pledging once in main that the process won’t access the network. Parts of the program that need different capabilities are isolated in their own processes and communicated with using IPC. I don’t think people want to pass all kinds of capabilities around in every function call.
- MattPalmer1086 5y agoSounds better in general, but probably wouldn't help with something like logging which would probably be used in all the processes. Unless you want to make IPC calls for every logging call.
- vlovich123 5y agoI don’t know. It’s not necessarily a bad idea because then you have a single audit point for all logs and can see the cost centralized in measurement tools vs it looking to be in the noise and never popping up unless you have particularly egregious hot spots.
- vladvasiliu 5y ago> Unless you want to make IPC calls for every logging call Isn't this more or less what ends up happening anyway? Sure, from the application's perspective it's just a function call. But usually, in the end, the logs are shipped to some central location one way or another.
- MattPalmer1086 5y agoHmmm, good point!