4 ms·
Doesn't do much good if the OS doesn't enforce them like seL4 can.
by 1letterunixname 3y ago
Doesn't do much good if the OS doesn't enforce them like seL4 can.
- tauroid 3y agoIf the FFI is also capability gated why can't the language do it? Edit: Pony seems to rely on restricting FFI privileges at the package level https://tutorial.ponylang.io/object-capabilities/trust-boundary https://tutorial.ponylang.io/object-capabilities/trust-bound.... Suppose it could have been function by function ("unsafe") but this sounds fine. Not sure what else I could have meant by a capability gated FFI.
- gpderetta 3y agoIn practice it means no redistributable native libraries or binaries. You would need installation time compilation, jittin or pure interpretation. Or some sort of trusted compiler-as-a-service with signed binaries.
- IshKebab 3y agoYou can compile to WASM to work around that, with some performance penalty.