Beispiel #1
0
/*
 * "defense in depth". the last frontier of defense.
 * zerovm limits itself as much as possible
 */
void LastDefenseLine(struct NaClApp *nap)
{
  LowerOwnPriority();
  LimitOwnIO(nap);
  LimitOwnMemory();
  ChrootJail();
  DisableSuperUser();
}
Beispiel #2
0
void LastDefenseLine(struct NaClApp *nap)
{
  LowerOwnPriority();
  LimitOwnIO();
  SetTimeout(nap->system_manifest);
}