Sandboxing made easy
Sandboxing made easy
Posted Aug 20, 2009 0:33 UTC (Thu) by Simetrical (guest, #53439)In reply to: Sandboxing made easy by man_ls
Parent article: Google's Chromium sandbox
Apparently because you need to be able to do things like allocate memory on
the heap, and the restricted thread can't do that. So you need a trusted
thread running in the same process.
the heap, and the restricted thread can't do that. So you need a trusted
thread running in the same process.