Show HN: Sandworm.js – Easy auditing and sandboxing for JavaScript dependencies
1–4 of 4 posts
Re: Show HN: Sandworm.js – Easy auditing and sandboxing for JavaScript dependencies
#2Hmmm wouldn't you want to intercept syscalls at the kernel level like AppArmor instead of at the application level?
Re: Show HN: Sandworm.js – Easy auditing and sandboxing for JavaScript dependencies
#3Hmmm wouldn't you want to intercept syscalls at the kernel level like AppArmor instead of at the application level?
This is cool though
Re: Show HN: Sandworm.js – Easy auditing and sandboxing for JavaScript dependencies
#4Hmmm wouldn't you want to intercept syscalls at the kernel level like AppArmor instead of at the application level?
This is cool though
Thanks!
Yes you can (and should) also intercept at kernel level, but the kernel can't tell which of your app's dependencies is responsible for the call, only the application knows that.