Re: Sandboxing strategy

Alyssa Ross
2025-09-10T15:14:50Z

[-- Attachment #1: Type: text/plain, Size: 747 bytes --]

Alyssa Ross <hi@alyssa.is> writes:

> This all sounds fine, BUT there are a couple of important things to bear
> in mind:
>
> • This needs to be maintainable. I don't know how much code this is
> going to be our how complex it's going to be, but that this will be
> totally custom does make me a bit concerned.

When you submit this, it might be helpful if you can structure it as
adding one sandboxing feature at a time (and ideally ordered by your
expectation of least to most controversial), so we can start getting it
in gradually. A small program that adds landlock rules sounds fine.
Once we start getting into namespaces I get a little scared. (Not
saying no, just that I'd expect we'll have to discuss it more.)