Posted 16 December 2012 - 09:47 AM
Well, I'm considering building apis in ways that allow easy sandboxing of programs, or not.
The thing is, I see many OS's which do so, and it has to have some cost, e.g. for protecting calls to getfenv you need to keep a blacklist of environments, or keep important OS variables local and pass them around. I.e., it's probably possible but an headache for devellopers.
Thing is, sandboxing that goes beyond maintaining an API self-contained/blocking access to running code(e.g. running programs, the Lua interpreter) and goes all the way to sanboxing programs run by users seems useless given it's complexity and the fact that computers are cheap.
But perhaps I'm missing something?
The thing is, I see many OS's which do so, and it has to have some cost, e.g. for protecting calls to getfenv you need to keep a blacklist of environments, or keep important OS variables local and pass them around. I.e., it's probably possible but an headache for devellopers.
Thing is, sandboxing that goes beyond maintaining an API self-contained/blocking access to running code(e.g. running programs, the Lua interpreter) and goes all the way to sanboxing programs run by users seems useless given it's complexity and the fact that computers are cheap.
But perhaps I'm missing something?