News for hackers. Stuff that matters.

A comment on Oasis: Small statically-linked Linux system. Parent comment

Re:Oasis: Small statically-linked Linux system by vbezhenar on Sunday August 14, 2022 @11:04AM (#32459849)
Docker provides much more isolation than a dynamic libraries.

Static linking is not a new thing. It was there since a beginning. Dynamic linking is a new thing compared to it.

[ Parent | on HN ]
Re:Oasis: Small statically-linked Linux system by goodpoint on Sunday August 14, 2022 @03:00PM (#32461896)
> Docker provides much more isolation

The very opposite. You can do all the sandboxing you want without needing docker and you will avoid docker's big attack surface.

[ Parent | on HN ]
Re:Oasis: Small statically-linked Linux system by naasking on Sunday August 14, 2022 @09:09PM (#32464753)
Not without machine code analysis. That's a pretty big attack surface itself if you're relying on it for safety properties.
[ Parent | on HN ]