Sandbox: Remove multiple stages
While interesitng in theory, there is nothing to be gained here, because we don't really have user input at those early stages. As we are also not a privileged process, those early stage sandboxes in the end are not worth it, since they increase complexity while there is no benefit in practise. So, reduce those 3 stages to a single one (enable()), which we activate after CLI server has launched.
This commit is contained in:
@ -10,16 +10,7 @@ class Sandbox
|
||||
/* Whether the platform has everything required to active all sandbnox modes */
|
||||
virtual bool supported() = 0;
|
||||
|
||||
/* Activated early. At this point, we need more system calls
|
||||
* than later on */
|
||||
virtual bool enableForInit() = 0;
|
||||
|
||||
/* Activated after config has been read. Now we now which paths we need access to */
|
||||
virtual bool enablePreWorker(std::vector<std::string> fsPaths) = 0;
|
||||
|
||||
/* Activated after we have acquired resources (bound to ports etc.)
|
||||
*
|
||||
* This should allow us to further restrcit the process */
|
||||
virtual bool enableForWorker() = 0;
|
||||
/* Activated after we have acquired resources (bound to ports etc.)*/
|
||||
virtual bool enable(std::vector<std::string> fsPaths) = 0;
|
||||
};
|
||||
#endif
|
||||
|
Reference in New Issue
Block a user