4 ms·
I can't wait for a time when simple and universal sandboxing will be available with no need for root. Just: $ sandbox 'curl http://whatever http://whatever | s
by hawski 11y ago
I can't wait for a time when simple and universal sandboxing will be available with no need for root.
Just:
$ sandbox 'curl http://whatever http://whatever | sh'
With predefined permission profiles or interactive permission system.
- seanp2k2 11y agoWhat would it do which can't already be done with normal nix permissions and/or ACLs? The solution is to create a user account, like www-run or redis or Postgres or any of the other tons of things which already do this. An even better idea is jails, or something like Docker.
- hawski 11y agoWhat you present is not simple or universal. Nix permissions and ACLs are for file system access and sadly in Linux "everything is a file" is a lie. Jails or Docker are practically heavyweight sandboxes and they need root access.