3 ms·

Node allows native addons in packages via the N-API so any native module aren't restricted by those permissions. Deno deals with this via --allow-ffi but these

• motorest 1y ago
  > Node allows native addons in packages via the N-API so any native module aren't restricted by those permissions. (...) Node permissions (...) just restrict the Node standard library. So what? That's clearly laid out in Node's documentation. https://nodejs.org/api/permissions.html#file-system-permissions https://nodejs.org/api/permissions.html#file-system-permissi... What point do you think you're making?
  • pfg_ 1y ago
    What is the point of a permissions system that can be trivially bypassed?
    • eviks 1y ago
      To check a box > need to demonstrate security compliance.
    • motorest 1y ago
      > What is the point of a permissions system that can be trivially bypassed? You seem to be confused. The system is not bypassed. The only argument you can make is that the system covers calls to node:fs, whereas some modules might not use node:fs to access the file system. You control what dependencies you run in your system, and how you design your software. If you choose to design your system in such a way that you absolutely need your Node.js app to have unrestricted access to the file systems, you have the tools to do that. If instead you want to lock down file system access, just use node:fs and flip a switch.