nknize
Joined 7 years ago
Karma
1
Submissions
10
Member since
Nov 27
[ my public key: https://keybase.io/nknize; my proof: https://keybase.io/nknize/sigs/_ZM8GdymHF8GJshV7CjsOwSjbYDodRKLh_Yv6rQZouU ]
View on Hacker NewsJoined 7 years ago
jGuard is a capability-based security framework for the JVM (JDK 21+) designed for running untrusted or semi-trusted code after the removal of the Java SecurityManager.
Policies are declared using a module-style descriptor inspired by module-info.java, and enforcement happens at the JDK operation level (filesystem, network, threads, native loads).
Happy to answer questions about the threat model, design tradeoffs, or how this compares to the legacy SecurityManager.
So, if OpenSearch were to move to a foundation which would you prefer? Specify in comments other preferences.