points by snvzz 1 day ago | 0 comments
It is only possible to draw the rest of the safe owl if you have a safe crayon.
seL4 is the choice that allows for a safe system to be built. Any other choice of kernel currently available does lack the mechanisms and guarantees.
[–] cowlevel 21 hours ago
[–] snvzz 21 hours ago
>Of course, you’d want to try ../… Yes, it does let you escape the temporary folder...
This is absolute bull on seL4 by construction. "sandboxes" that prevent access that the OS otherwise grants. In seL4, this component would not need a sandbox in the first place, because it would never have a capability to some VFS path it doesn't need to access.
This sort of escape relies on ambient security, which is the security model of UNIX and Windows NT. Access is granted by default and then restricted, rather than simply not granted. A broken security model.
And, unlike a demonstrated shitty browser sandbox, seL4 formally guarantees isolation. Capabilities cannot be forged.