alt Hacker NewsI was a fan of deno because at least they tried, its not that there was an alternative runtime that tries to do permissions right or that there is an operating system tool that allows async(!) permissions with user interaction. We really need a simple to use "productised" but true open source solution that allows halting any software and evaluating policies for run, fs and network etc and can reason on process and context level.
Replies
ch4s3 • yesterday at 6:29 PM
I’m working on a capability system for a language that can compile to js[1], pardon the mess.
[1] https://march-lang.org/docs/capabilities/#the-problem-they-s...
➕ show 2 replies
szundi • yesterday at 6:23 PM
[dead]
I built exactly this at work over the past few months, sadly not open source though. It uses Cedar policies for process lifecycle, network activity (at basically every layer), filesystem access, credential usage through brokers, and so on, with context injected into every evaluation, and cgroup freezer on Linux for stop-and-escalate-to-user. Maybe I should use this as evidence of demand for us to open source it...