Skip to content

Latest commit

 

History

History
54 lines (34 loc) · 789 Bytes

README.md

File metadata and controls

54 lines (34 loc) · 789 Bytes

forkoff

Experiment that uses kafel to set seccomp filters to prevent forking Really bad prototype using neon + rust to build bindings.

Currently an EPERM error will be raised when you try to run a process.

Hacking

Install submodules:

git submodule update --init --recursive

Install Rust

curl https://sh.rustup.rs -sSf | sh

Install Neon

npm install -g neon-cli

Ensure libkafel is built and accessible

  • build.rs will look for the file in the root directory
  • node expects libkafel.so.1 to exist so you need to symlink or rename
cd vendor/kafel
make
cp libkafel.so ../../
cp libkafel.so ../../../libkafel.so.1

Run the build

neon build 

Run the demo

npm start