Search Results for "sandbox"

...It scales from embedded systems with as little as 4 MB of memory to highly dynamic general-purpose workloads. Genode is based on a recursive system structure. Each program runs in a dedicated sandbox and gets granted only those access rights and resources that are needed for its specific purpose. Programs can create and manage sub-sandboxes out of their own resources, thereby forming hierarchies where policies can be applied at each level. The framework provides mechanisms to let programs communicate with each other and trade their resources, but only in strictly-defined manners. ...

The sandbox system call API is a simple yet powerful mechanism for confining untrusted code. It is similar to chroot() and BSD jails, but has much greater flexibility and expressive power. The code is mostly complete but not yet fully functional.

A challenging project that attempts to get a Linux distro to run under Google's NaCl. NaCl untime environment is very different from traditional posix systems. There is several hurdles to overcome in order to get a standard linux distribution to run under NaCl. There is a library called nacl_io in the Google NaCl sdk. It mimics the function of a posix files and sockets on top of ppapi. Similarly in naclports there is a crude nacl-spawn library which mimics processes by creating multiple...