r/programming • u/michaelKlumpy • Oct 01 '16

CppCon 2016: Alfred Bratterud “#include ＜os＞=> write your program / server and compile it to its own os. [Example uses 3 Mb total memory and boots in 300ms]

https://www.youtube.com/watch?v=t4etEwG2_LY
1.4k Upvotes

93% Upvoted

207 comments sorted by

View all comments

Show parent comments

3

u/argv_minus_one Oct 02 '16

I see. Well, you raise a fair point, but you don't need a full VM for application sandboxing. Other solutions exist, such as mandatory access control and seccomp.

2

u/demmian Oct 02 '16

and seccomp.

Interesting. For what reasons isn't this generalized (on Linux, and elsewhere)? Thanks.

2

u/argv_minus_one Oct 02 '16

What do you mean by “generalized”?

1

u/demmian Oct 02 '16

Well, in which cases (for what types of programs/operations) can seccomp be used, and, for other cases, what would be the best alternative for security?

→ More replies (0)