3 ms·
Sandbox isolation is only slightly important, you don't need to make it fancy, just a plain old VM. The really important thing is how you control capabilities y
by CuriouslyC 8mo ago
Sandbox isolation is only slightly important, you don't need to make it fancy, just a plain old VM. The really important thing is how you control capabilities you give for the agent to act on your behalf.
- yoyohello13 8mo agoBut managing granular permissions is hard. The common denominator with all these discussions is people want to apply the minimal amount of thinking possible.
- jbverschoor 8mo ago1) can access/write local files? 2) can access/write a specific folder? 3) can access network? 4) can access gateway/internet? 5) can access local network? (vlans would help here) 6) give access to USB devices 7) needs access to the screen? -> giveframebuffer access / drawing primitive 8) Need to write? Use an overlay FS that can be checked by the host and approved 9) sub processes can never escalate permissions By default: nothing. But unfortunately, it’s always by default allow. Also, make it simple to remove the permissions again.