Re: Add runkit to PHP Runtime
| From: | Sara Golemon | Date: | Thu, 02 Aug 2012 23:22:43 +0000 |
| Subject: | Re: Add runkit to PHP Runtime | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-61978@lists.php.net to get a copy of this message | ||
On Thu, Aug 2, 2012 at 4:17 PM, Leigh <leight@gmail.com> wrote:
>> Sandboxing: Complicated by the fact that it only works in a threaded
>> build, can't transfer all types (e.g. resource, complex objects), and
>> can't run concurrently. Until/unless these problems can be
>> meaningfully solved, I wouldn't consider it a functional
>> implementation.
>
> To me the "thread thing" feels like the dirty hack workaround
> _because_ it's in PECL, and this is the only option available.
>
In all seriousness, I'd love to hear how you'd do Sandboxing without
using the tsrm context hack I used in runkit. That approach had
nothing to do with being in PECL, it had to do with that being the
only mechanism available to swap globals in and out at will.