GNU bug report logs - #45198
28.0.50; Sandbox mode

Previous Next

Full log

Message #299 received at 45198 <at> debbugs.gnu.org (full text, mbox):

From: Mattias Engdegård <mattiase <at> acm.org>
To: Stefan Monnier <monnier <at> iro.umontreal.ca>
Cc: Alan Third <alan <at> idiocy.org>, 45198 <at> debbugs.gnu.org,
 Stefan Kangas <stefan <at> marxist.se>, Philipp <p.stephani2 <at> gmail.com>,
 João Távora <joaotavora <at> gmail.com>,
 Eli Zaretskii <eliz <at> gnu.org>
Subject: Re: bug#45198: 28.0.50; Sandbox mode
Date: Fri, 17 Sep 2021 21:49:39 +0200

[Message part 1 (text/plain, inline)]

17 sep. 2021 kl. 15.20 skrev Stefan Monnier <monnier <at> iro.umontreal.ca>:

> For `elpa-admin.el` we need a writable directory as well.
> We also need the ability to run sub-processes.  Your `bwrap`
> implementation for GNU/Linux should allow that, AFAICT, but I can't tell
> if `darwin-sandbox-enter` also allows it.

Looks like it can be made to work.

Of course this whole exercise doesn't really touch the questions that really matter, such as whether it is practical for actual use.

[0001-Add-macOS-sandboxing-bug-45198.patch (application/octet-stream, attachment)]

[0002-platform-independent-sandbox-interface.patch (application/octet-stream, attachment)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.