pcwalton/gaol
View on GitHub ↗ ★ 5 Rust
Cross-platform application sandboxing for Rust
8 mentions on Hacker News by 5 people: 0 stories, 8 comments · first 2015-05-02 · latest 2015-12-25
20082026
-
https://github.com/pcwalton/gaol
comment by steveklabnik · 2015-12-25 · in The Problem with Friendly C -
There is no paper per se, but you can look at the code (including readme) for the sandbox here: https://github.com/pcwalton/gaol
comment by pcwalton · 2015-11-26 · in Firefox: We Don't Need Google's Money Any More -
…under Rust. I have a crate for this, the use of which should be landed in Servo any day now: https://github.com/pcwalton/gaol
comment by pcwalton · 2015-10-01 · in Tame() – bad kitty, no socket for you -
…Linux's seccomp-bpf (which Theo describes as 'insane') and OS X's seatbelt are all similar. Gaol ( https://github.com/pcwalton/gaol ) uses either seccomp-bpf or seatbelt as a backend. Windows 8 has an equivalent of this, using a…
comment by gonzo · 2015-07-19 · in Docker on FreeBSD -
…and seatbelt backends, has a concept of "profiles," which I think matches the general idea here: https://github.com/pcwalton/gaol To be fair I wouldn't use it in production yet, but it's quite a bit more reviewed than tame(2) is right now.
comment by geofft · 2015-07-19 · in A subsystem to restrict programs into a “reduced feature operating model” -
…on Windows would want to be accompanied by a sandbox utilizing those kinds of features. [1]: https://github.com/pcwalton/gaol
comment by pcwalton · 2015-05-13 · in Servo: Embeddable Browser Engine -
…for some work I've done in the past in a similar situation. [2]: https://github.com/pcwalton/gaol
comment by Manishearth · 2015-05-13 · in Mozilla Launches a New Firefox Version Without DRM Support -
…send Rust objects serialized via serde [2] over native OS IPC pipes (AF_UNIX sockets on Unix). [1]: https://github.com/pcwalton/gaol [2]: https://github.com/serde-rs/serde
comment by pcwalton · 2015-05-02 · in Servo Continues Pushing Forward