Re: [9fans] security

["Iruata Souza" <iru.muzgo@gmail.com>]

On 10/28/07, don bailey <don.bailey@gmail.com> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> > in that case, one should build a sandbox, climb into it and import the
> > fs.  the potential damage is contained.  maybe 9fs should have an
> > option to do that.
> >
>
> What if the trojan broke out of that sandbox? Or knows how to
> import other parts of the namespace into its process? Namespaces
> on Plan 9 are nice, but they absolutely do not constitute a safe
> sandbox. Boo easy answers.
>

ok, so can I suppose you know how to do that? if so, do you have a
better idea for sandboxing? if not, maybe it should be good for you to
think in terms of what you or someone else already got working instead
of saying every little thing that comes on your mind.
for example, could you argument (preferably with source code) why
namespaces aren't safe sandboxing? if it is that easy as you say it
is, I guess you already got ways of bypassing it.

iru