Comments (4)
bluejekyll
commented on May 22, 2024
1
Looks like Linux support is lacking. I don't have a good way to test the other OSes right now. If I incorporate this is it something you could test? I really like the idea.
from hickory-dns.
pwrdwnsys
commented on May 22, 2024
Yes, happy to do some testing. I can test against OS X and FreeBSD, and can also test against OpenBSD when rusty-sandbox's pledge support is completed.
from hickory-dns.
phillipCouto
commented on May 22, 2024
On linux wouldn't the tools like selinux, systemd, and apparmor provide very similar features without the application being coded with sandbox logic?
Also there is no support for windows in rust-sandbox or the mentioned gaol library either. For completeness isn't this something to consider as well?
from hickory-dns.
bluejekyll
commented on May 22, 2024
I have done zero research on this. selinux, apparmor, even docker/lxc, would be fine methods of sandboxing the process.
from hickory-dns.
Related Issues (20)
- Failing to read "_acme-challenge" TXT record HOT 3
- Debug assert triggered: record types do not match, DNSKEY <> Some(Unknown(48)) HOT 4
- do not leak and requested domain to the log HOT 21
- trust-dns quic client can not querry trust-dns quic server HOT 11
- RecordType does not implement Deserialize... but it does? HOT 3
- How to run async dynamic update with DNS SEC? HOT 2
- `proto::op::Message` can panic when `dnssec` is not enabled no debug builds HOT 3
- Panic: "bad character in CAA issuer value" HOT 2
- Prometheus metrics HOT 4
- `ClientConfig` and `RootCertStore` improvements HOT 4
- trust-dns only warns instead of returning Err when it has no nameservers listed in /etc/resolv.conf HOT 6
- read_system_conf returns different Error types on unix vs windows HOT 1
- Unable to build without linking against libssl/libcrypt HOT 2
- Revisit maximum request sizes in TCP, DoT, DoH, and DoQ implementations
- Axfr and AxfrStream issues with big zones HOT 3
- Sync client hang HOT 4
- Hickory DNS rebranding HOT 9
- How can AsyncClient be used with UdpStream? HOT 10
- Use AsyncClient across multiple tokio async tasks HOT 2
- Update ring to support s390x and ppc64el HOT 12
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from hickory-dns.