mirror of
https://github.com/google/sandboxed-api.git
synced 2024-03-22 13:11:30 +08:00
8412af7e5f
PiperOrigin-RevId: 276269876 Change-Id: I5fd50b3532344cb76b34748cd0640bba931ed290
38 lines
1.5 KiB
Markdown
38 lines
1.5 KiB
Markdown
# Sandboxed API
|
|
|
|
Copyright 2019 Google LLC.
|
|
|
|
![Sandbox](sandboxed_api/docs/images/playing-in-sand.png)
|
|
|
|
[![Build status](https://badge.buildkite.com/2f662d7bddfd1c07d25bf92d243538c8344bc6fbf38fe187f8.svg)](https://buildkite.com/bazel/sandboxed-api)
|
|
|
|
## What is Sandboxed API?
|
|
|
|
The Sandboxed API project (**SAPI**) aims to make sandboxing of C/C++ libraries
|
|
less burdensome: after initial setup of security policies and generation of
|
|
library interfaces, an almost-identical stub API is generated, transparently
|
|
forwarding calls using a custom RPC layer to the real library running inside a
|
|
sandboxed environment.
|
|
|
|
Additionally, each SAPI library utilizes a tightly defined security policy, in
|
|
contrast to the typical sandboxed project, where security policies must cover the total
|
|
syscall/resource footprint of all utilized libraries.
|
|
|
|
## Documentation
|
|
|
|
Detailed developer documentation is available on the Google Developers site for
|
|
[Sandboxed API](https://developers.google.com/sandboxed-api).
|
|
|
|
There is also a
|
|
[Getting Started](https://developers.google.com/sandboxed-api/docs/getting-started)
|
|
guide.
|
|
|
|
## Getting Involved
|
|
|
|
If you want to contribute, please read [CONTRIBUTING.md](CONTRIBUTING.md) and
|
|
send us pull requests. You can also report bugs or file feature requests.
|
|
|
|
If you'd like to talk to the developers or get notified about major product
|
|
updates, you may want to subscribe to our
|
|
[mailing list](mailto:sandboxed-api-users@googlegroups.com) or sign up with this [link](https://groups.google.com/forum/#!forum/sandboxed-api-users).
|