Consider using sandboxing as defense in depth

dtolnay / watt

Runtime for executing procedural macros as WebAssembly

Apache License 2.0

1.27k stars 29 forks source link

Consider using sandboxing as defense in depth #7

Closed dlight closed 5 years ago

dlight commented 5 years ago

Rustc has a number of known soundness bugs. What about running wasm code on a lightweight sandbox like gaol or rusty-sandbox as a best-effort attempt to provide defense in depth?

dtolnay commented 5 years ago

Thanks for the idea! I am not interested in pursuing this in Watt, but it would be worth bringing up again if we eventually go for Wasm-based proc macros built into rustc.