search

dckc / awesome-ocap

Awesome Object Capabilities and Capability Security
The Unlicense
348 stars 25 forks source link

wanted: walkdir work-alike using cap-std #48

Open dckc opened 5 months ago

dckc commented 5 months ago

The walkdir crate is pretty popular: ~250k downloads/day; 126m all time. Is there a work-alike using cap-std?

cc @sunfishcode - is there a cap-std discussion forum suitable for this question? It's not really in scope as a cap-std issue, is it?

Background

I'm interested in Zola as a blogging platform. To understand the security properties, I'd like to port it to use cap-std instead of ambient authority all over.

The Zola sources seemed like a manageable size, but as usual, they're the tip of an iceberg; underneath one line in libs/Cargo.toml is the whole walkdir crate.

sunfishcode commented 5 months ago

The cap-std repo contains "cap-" versions of some popular crates, such as cap-tempfiles and cap-directories. I think a cap-walkdir would also make sense. I filed https://github.com/bytecodealliance/cap-std/issues/82 to discuss it.