This is the mail archive of the kawa@sources.redhat.com mailing list for the Kawa project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

security features for kawa


I've modified Kawa's classloaders to support annotation of compiled code
to work with the java security manager, so that scheme code may be
subject to runtime permission checking. Given the way code is loaded in
Kawa, this allows very fine-grained sandboxing -- permissions can be
assigned at the granularity of individual functions. In my application,
this has been a useful mechanism for containment of code that is
distributed at runtime, and for controlling resource access by 
untrusted code.

I can contribute this functionality back into the Kawa codebase if others
are interested. It would need some additional work to be made ready for 
general use, so I'd like to gauge interest before submitting patches.

cheers...
tom


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]