3 ms·
I'm very interested in the NaCl approach to server-side jails: > To isolate user programs from Google's infrastructure, the back > end runs them under Nat
by jitl 13y ago
I'm very interested in the NaCl approach to server-side jails:
> To isolate user programs from Google's infrastructure, the back
> end runs them under Native Client (or "NaCl"), a technology
> developed by Google to permit the safe execution of x86 programs
> inside web browsers. The back end uses a special
> version of the gc tool chain that generates NaCl executables
I'm a bit sad that the article didn't discuss using NaCl for constrained execution environments a bit more. Docker/linux containers are still a bit heavy-weight for low-budget ARM servers, and it'd be interesting to check out NaCl as a more lightweight, per-executable sandbox.
- enneff 13y agoI don't think the NaCl port will do ARM code generation. I'll write more about Go's NaCl support once it's actually in the tree. :-)
- comex 13y agoI'm annoyed that NaCl's SFI is being repurposed so blatantly uselessly. The overhead isn't that much, but when seccomp provides equal or better security without any expense, it really seems like reinventing the wheel.
- krasin 13y agoIt's always better to have multiple layers of defense. I won't be surprised, if Russ Cox has chosen sel_ldr_seccomp as the loader: https://src.chromium.org/viewvc/native_client/trunk/src/native_client/tests/sel_ldr_seccomp/ https://src.chromium.org/viewvc/native_client/trunk/src/nati...