2019-03-19 00:21:48 +08:00
|
|
|
# Sandboxed API
|
|
|
|
|
|
2019-10-23 22:23:41 +08:00
|
|
|
Copyright 2019 Google LLC.
|
2019-03-19 00:21:48 +08:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2019-10-23 22:23:41 +08:00
|
|
|
[](https://buildkite.com/bazel/sandboxed-api)
|
2019-03-19 00:21:48 +08:00
|
|
|
|
|
|
|
|
## What is Sandboxed API?
|
|
|
|
|
|
|
|
|
|
The Sandboxed API project (**SAPI**) aims to make sandboxing of C/C++ libraries
|
|
|
|
|
less burdensome: after initial setup of security policies and generation of
|
2019-09-04 20:21:29 +08:00
|
|
|
library interfaces, an almost-identical stub API is generated, transparently
|
|
|
|
|
forwarding calls using a custom RPC layer to the real library running inside a
|
|
|
|
|
sandboxed environment.
|
2019-03-19 00:21:48 +08:00
|
|
|
|
|
|
|
|
Additionally, each SAPI library utilizes a tightly defined security policy, in
|
2019-03-20 05:10:15 +08:00
|
|
|
contrast to the typical sandboxed project, where security policies must cover the total
|
2019-03-19 00:21:48 +08:00
|
|
|
syscall/resource footprint of all utilized libraries.
|
|
|
|
|
|
2019-09-04 20:21:29 +08:00
|
|
|
## Documentation
|
2019-03-19 00:21:48 +08:00
|
|
|
|
2019-09-04 20:21:29 +08:00
|
|
|
Detailed developer documentation is available on the Google Developers site for
|
|
|
|
|
[Sandboxed API](https://developers.google.com/sandboxed-api).
|
2019-03-19 00:21:48 +08:00
|
|
|
|
2019-09-04 20:21:29 +08:00
|
|
|
There is also a
|
|
|
|
|
[Getting Started](https://developers.google.com/sandboxed-api/docs/getting-started)
|
|
|
|
|
guide.
|
2019-03-19 00:21:48 +08:00
|
|
|
|
|
|
|
|
## Getting Involved
|
|
|
|
|
|
|
|
|
|
If you want to contribute, please read [CONTRIBUTING.md](CONTRIBUTING.md) and
|
|
|
|
|
send us pull requests. You can also report bugs or file feature requests.
|
|
|
|
|
|
|
|
|
|
If you'd like to talk to the developers or get notified about major product
|
|
|
|
|
updates, you may want to subscribe to our
|
2019-03-19 04:07:56 +08:00
|
|
|
[mailing list](mailto:sandboxed-api-users@googlegroups.com) or sign up with this [link](https://groups.google.com/forum/#!forum/sandboxed-api-users).
|
