On Thu, 15 Nov 2012 21:26:25 +0900 Carsten Haitzler (The Rasterman) <ras...@rasterman.com> wrote:
> On Thu, 15 Nov 2012 16:33:35 +1030 Simon <si...@simotek.net> said: > > > On 11/15/2012 04:40 PM, Carsten Haitzler (The Rasterman) wrote: > > > On Thu, 15 Nov 2012 15:05:51 +1030 Simon Lees <si...@simotek.net> > > > said: > > > Out of interest will e18 contain the ability to sandbox 3rd party > > modules so they can't take down the whole of enlightenment? one of > > the > > by definition, they can't be sandboxed. they are runtime patches to > code basically. they are just "more code stuffed into e" thus why > they can cause bugs. there is no way to sanboxe them and NOt provide > access to all of memory of e, function calls etc. - then they are no > longer modules. > > what you are wanting is separate PROCESSES that talk to e (eg via > ipc) and ask it to do thnigs. these are safer, and can mess up on > their own all they like and not kill e.. the other way is a vm setup > - eg some scripting lang that is interpreted and thus sandboxed. > modules were designed to make it possible to WRITe such a sandbox > module - one that runs a lua, js, embryo, pyhton or whatever runtime > and then glues in access to e and efl via bindings. as such such a > thing doesnt currently exist, but it is possible to do. at this point > there are no concrete plans to do this, but maybe using elev8 and > making a libelev8 is a good way to go. Um, you have used embryo yourself to make a module, and you insisted I sandbox edje Lua plenty, it could be used for a module as well. I plan on writing Lua E17 modules some day when I get around to it. Sure, they can't do everything a C module could do, but that's the point of sand boxing. On the other hand, I did start writing the emu module, which was a generic module that interfaced to E17 via IPC, allowing people to write modules in any language they like, with the full protection you mention above. It bit rotted long ago though while I got busy with other stuff. Which is your first method. I'm sure a bit of love could resurrect it without too much drama. So both methods already exist. Sorta. -- A big old stinking pile of genius that no one wants coz there are too many silver coated monkeys in the world.
signature.asc
Description: PGP signature
------------------------------------------------------------------------------ Monitor your physical, virtual and cloud infrastructure from a single web console. Get in-depth insight into apps, servers, databases, vmware, SAP, cloud infrastructure, etc. Download 30-day Free Trial. Pricing starts from $795 for 25 servers or applications! http://p.sf.net/sfu/zoho_dev2dev_nov
_______________________________________________ enlightenment-devel mailing list enlightenment-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/enlightenment-devel
