/* * "defense in depth". the last frontier of defense. * zerovm limits itself as much as possible */ void LastDefenseLine(struct NaClApp *nap) { LowerOwnPriority(); LimitOwnIO(nap); LimitOwnMemory(); ChrootJail(); DisableSuperUser(); }
void LastDefenseLine(struct NaClApp *nap) { LowerOwnPriority(); LimitOwnIO(); SetTimeout(nap->system_manifest); }