7 ms·
> There isn’t a single universal standard for sandboxing across all the different platforms that are supported by Rust. I said OS level. It's something I shou
by jonahx 28d ago
> There isn’t a single universal standard for sandboxing across all the different platforms that are supported by Rust.
I said OS level. It's something I should easily be able to do via the OS capabilities that would work for rust, npm, etc.
I would use it not only for rust builds but for nearly every app on my computer.
- hnlmorg 27d agoThat’s already easy to do. In fact most CI/CD pipelines already work this way. The problem is you still have a compromised executable at the end of the pipeline. So you haven’t actually solved much.