vmg-dev
As the title says, I want to run untrusted code in a v8 isolate and I’m wondering if elixir processes provide similar isolation as os processes. One of the risks with v8 sandbox escapes is that they will have access to shared process memory. My understanding of elixir processes is that they don’t share memory so my assumption is a sandbox escape would not have a similar blast radius? If I were to combine elixir process with seccomp filters would I be fine?
Where Next?
Trending in Questions
Other Trending Topics
Latest on Elixir Forum
Sponsor Spotlight
Producing high quality Elixir screencasts since 2017.
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #library
- #deployment
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #elixirconf
- #channels
- #exunit
- #discussion
- #code-sync
- #podcasts
- #javascript
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #elixirconf-us
- #ai
- #blog-post
- #elixir-ls
- #phoenix_html
- #iex
- #graphql
- #genstage
- #websockets
- #supervisor
- #advent-of-code
- #distillery
- #processes
- #api
- #forms
- #hex
- #security
- #metaprogramming
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Catch errors, track performance, monitor hosts and more.
Error tracking, logs, uptime, and Just Enough APM. Built for developers.
Practical resources that improve the lives of professional developers.
Master modern tools, write cleaner code, and tackle real-world challenges.
Producing high quality Elixir screencasts since 2017.
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"
Showing Posts 1 to 4- Show Best Posts
- Show All (oldest first)
- Show All (newest first)
D4no0
Can you explain how you are planning to run this sandbox?
There is no isolation once you go outside of application codebase/runtime, your only bet is to have the sandbox fully controlled by your application code, like luerl does.
vmg-dev
I’ve built a rust library that interfaces directly with v8. I only have a high level idea of how this would work with elixir at the moment but my thought process is that the rust library will use rustler as the interface between rust and elixir and the rust code will spawn a separate thread that will contain the isolate, apply seccomp filters, etc.
Normally, the recommendation with v8 isolates is to run them in a separate OS process because v8 isolates can be hacked and a sandbox escape can expose shared memory.
D4no0
Rustler uses
NIFsby default. All theNIFsare being called from schedulers processes that are running usually on each OS thread. There is no possible isolation, as elixir processes are application level abstraction, the VM is a program written in C that executes code.This can be done easily by making your rust application as a CLI and run it alongside your elixir app. You can take a look at Port for examples.
vmg-dev
Got it, thanks for the help.