David Leadbeater <[email protected]> wrote: > I do successfully use execpromises in some private code, but I don't > think this is something that is currently generally applicable, because > the sandboxing will fail in some cases and those cases aren't obvious to > the user, meaning they are likely to disable the sandboxing, defeating > the point of it.
I think of a much bigger problem. The program does not expect that it is not running in full POSIX. system calls start returning -1 deep inside the program , and percolate throughout the program with entirely unknown consequences. The program has gone off the rails, BECAUSE it is not being provided with the full POSIX experience. pledge and unveil are too strong. Everyone else saying "sandbox" is using being very lighthanded.
