Re:Plan9-9k: 64-bit Plan 9
by pjmlp on Saturday June 10, 2017 @03:08PM
(#14528691)
I see a difference when the language doesn't provide mechanisms to enforce program integrity.
With a type safe language, being used alongside isolation mechanisms, I get two layers of protection, at language level and at the sandbox level.
Like Android or ChromeOS do with their managed environments + Linux SE and on Samsung's case Knox.
If the language is unsafe, everything outside the jail might be safe, but the program integrity or the data inside of the container are exposed to the attackers.
With a type safe language, being used alongside isolation mechanisms, I get two layers of protection, at language level and at the sandbox level.
Like Android or ChromeOS do with their managed environments + Linux SE and on Samsung's case Knox.
If the language is unsafe, everything outside the jail might be safe, but the program integrity or the data inside of the container are exposed to the attackers.