2 ms·
Namespaces are a far cry from the capability security model that Wasm uses.
by davexunit 3y ago
Namespaces are a far cry from the capability security model that Wasm uses.
- pritambaral 3y agoYes, and Wasm's capability based security model makes sense for adding plugins to your app. But TFA is intended for running entire apps, so I think letting the user of the app control fs and network access via the already widely supported and proven method of CGroups and namespaces is a much better option than whatever method each individual app comes up with.