GNU bug report logs - #45198
28.0.50; Sandbox mode

Previous Next

Full log

View this message in rfc822 format

From: Mattias Engdegård <mattiase <at> acm.org>
To: 45198 <at> debbugs.gnu.org
Cc: Alan Third <alan <at> idiocy.org>, Bastien <bzg <at> gnu.org>, Philipp Stephani <p.stephani2 <at> gmail.com>, João Távora <joaotavora <at> gmail.com>, Stefan Monnier <monnier <at> iro.umontreal.ca>, Stefan Kangas <stefankangas <at> gmail.com>
Subject: bug#45198: 28.0.50; Sandbox mode
Date: Wed, 30 Dec 2020 15:59:19 +0100

[Message part 1 (text/plain, inline)]

Here is a bare-bones macOS sandbox implementation. In practice, it would probably be called in an --eval argument to guard anything executed later. It should be sufficient for the typical untrusted flymake checker running in an Emacs subprocess and printing to stdout/stderr.

[macos-sandbox.diff (application/octet-stream, attachment)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.