Hi Peter,
Thank you for your response!
Looking at Capsicum, I think it has an even lower safety profile than
NaCl - my usecase might just run any beastly binary code, so the sandbox
wall needs to be the toughest you got, so using BHyVe here makes sense.
Also there's a generality problem -
On Mon, 8 Dec 2014, Tinker wrote:
Looking at Capsicum, I think it has an even lower safety profile than NaCl -
my usecase might just run any beastly binary code, so the sandbox wall needs
to be the toughest you got, so using BHyVe here makes sense.
You could use jails..
- The kernel is
Can the following under any circumstance be done with BHyVe?
Depends on how you define any :)
BHyVe_sandbox* s = BHyVe_createSandbox(100KB RAM, 2 CPU cores,void*
pointer to the audio codec binary code,int size of the same code);
and then pass in data for procedure invocation like