anon2 (anon.delete@this.anon.com) on March 16, 2021 5:13 pm wrote:
> Gabriele Svelto (gabriele.svelto.delete@this.gmail.com) on March 16, 2021 7:23 am wrote:
> > anon2 (anon.delete@this.anon.com) on March 15, 2021 8:00 pm wrote:
> > > Yes, some do that indeed. And your most common sandboxed application around when its running on the most
> > > common platform around (i.e., Linux/Android) uses a very different architecture that does not farm out
> > > all requests via IPC to a broker service, but instead does the majority of the filtering inline via kernel
> > > facilities (namespaces, eBPF). I'll give you three guesses as to which model has better performance.
> >
> > How is that relevant to the point? You claimed there wasn't software that proxy'd
> > function calls via IPC,
>
> No I didn't.

"Sandboxed applications in general do not work that way at all. Containers, cgroups, namespaces etc on Linux for example do no such thing, so it is entirely implementation specific. In this case the kernel isolates various resources inline in system calls, no IPC or message passing to be seen at all."

By that I meant that as a general statement, you can't say that sandboxed applications use RPC. Because some don't.

I did not write or imply that some specific sandboxed application does not use it, I was talking about in general.