Re: Sandboxing Code [Security Critical]

[Ori Bernstein <ori@xxxxxxxxxxxxxx>]

And it's online, with a mandelbrot demo.

    http://eigenstate.org/myrddin/playground

As a side note, why does Linux need CAP_SYS_ADMIN for things like
isolating your process in it's own PID namespace? I'd like to use that
in the sandboxing code, but I don't like giving CAP_SYS_ADMIN. Feels
like it's almost CAP_MIGHT_AS_WELL_SUID.

On Wed, 24 Sep 2014 12:40:49 +0200, Daniel Cegiełka <daniel.cegielka@xxxxxxxxx> wrote:

> nice :) thx.
> 


-- 
    Ori Bernstein