Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Use gaol as the sandboxing mechanism #4

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from
Open

Use gaol as the sandboxing mechanism #4

wants to merge 1 commit into from

Commits on May 18, 2019

  1. Use gaol as the sandboxing mechanism 

    This commit signals the intent of this project to explore `gaol` as the
mechanism by which builds are sandboxed.

The README.md for `gaol` carries the following warning:

> gaol is only lightly reviewed for correctness and security.
> It should not be considered mature or "battle-tested".
> Use at your own risk.

However, cursory review of gaol's source code shows it's a relatively
simple cross-platform sandboxing solution which provides pure Rust
wrappers for the underlying OS facilities sandboxing solutions should be
leveraging.

As `gaol` is used by Servo, it's something the Rust team is probably
already familiar with, which increases the chances of upstreaming a
sandboxing solution into Cargo proper, a potential goal for this
project.
    @tarcieri
    tarcieri committed May 18, 2019
    Configuration menu
    Copy the full SHA
    ccfd1da View commit details
    Browse the repository at this point in the history