diff options
| author | Kartik K. Agaram <vc@akkartik.com> | 2021-12-25 10:52:48 -0800 |
|---|---|---|
| committer | Kartik K. Agaram <vc@akkartik.com> | 2021-12-25 11:04:23 -0800 |
| commit | 917646fc9f75ab573d2b09429784dcc0940f8619 (patch) | |
| tree | f0787e7e94a4deb452a26209b10adaeb130c8347 /sandboxing | |
| parent | 6af91eb0d2ef45fea1a6f35cd6aa1fa2b7435401 (diff) | |
| download | teliva-917646fc9f75ab573d2b09429784dcc0940f8619.tar.gz | |
sandbox: no popen
Again, too difficult to sandbox for now.
Diffstat (limited to 'sandboxing')
| -rw-r--r-- | sandboxing/README.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sandboxing/README.md b/sandboxing/README.md index 341cd82..4218054 100644 --- a/sandboxing/README.md +++ b/sandboxing/README.md @@ -33,7 +33,7 @@ Scenarios: allows an app to do anything. Educate people to separate apps that read sensitive data from apps that access remote servers. - (2) solution: map phases within an app to distinct permission sets - * (3) app wants access to system() or exec() + * (3) app wants access to system() or exec() or popen() Difficulty levels 1. I have some sense of how to enforce this. |