Re: Sandboxing strategy

[Alyssa Ross <hi@alyssa.is>]

[-- Attachment #1: Type: text/plain, Size: 747 bytes --]

Alyssa Ross <hi@alyssa.is> writes:

> This all sounds fine, BUT there are a couple of important things to bear
> in mind:
>
>  • This needs to be maintainable.  I don't know how much code this is
>    going to be our how complex it's going to be, but that this will be
>    totally custom does make me a bit concerned.

When you submit this, it might be helpful if you can structure it as
adding one sandboxing feature at a time (and ideally ordered by your
expectation of least to most controversial), so we can start getting it
in gradually.  A small program that adds landlock rules sounds fine.
Once we start getting into namespaces I get a little scared.  (Not
saying no, just that I'd expect we'll have to discuss it more.)

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 227 bytes --]