Closed egelja closed 1 week ago
Ideally, we run each wrapper proeces in an nsjail container to keep us from being pwned and them from interfering with each other.
nsjail
We should restrict each wrapper to having its own fs, and complete process isolation.
Easier as of #201 , @glasss13 or @andrlime want to take this on?
Ideally, we run each wrapper proeces in an
nsjail
container to keep us from being pwned and them from interfering with each other.We should restrict each wrapper to having its own fs, and complete process isolation.