lunatic icon indicating copy to clipboard operation
lunatic copied to clipboard

Support socket access management

Open ChenKS12138 opened this issue 3 years ago • 0 comments

It seems that socket access management is missing by far, and socket operation is unrestricted. Untrusted libraries could bind any socket, so the host environment could be hacked. Does any further plan has been put on the agenda?

Recently, wasmtime-wasi had released v0.34.0 which provides the basic networking(https://github.com/bytecodealliance/wasmtime/pull/3711) with access management API like preopened_socket. I think we could support socket access via it.

ChenKS12138 avatar Feb 15 '22 13:02 ChenKS12138