Comment by mike_hearn

Comment by mike_hearn 10 hours ago

Windows has a fairly capable sandbox called app isolation levels:

https://learn.microsoft.com/en-us/windows/win32/secauthz/app...

Look at how Chrome does it if you want to learn more. The API is classic Win32 unfortunately: extremely complicated, under-documented and full of razor sharp edges. The way Chrome does it also requires custom installer logic. But, it does exist.

mwcampbell 6 hours ago

Why do you say the way Chrome does it requires custom installer logic? Electron is able to use Chromium's sandbox for renderer processes without imposing any installer requirements as far as I know.

Reply View 2 replies

mike_hearn 4 hours ago

That's a good question, I'm not sure how Electron does it. Chrome sets things up at install time with special permissions on its own files so the sandboxed processes can read them.

Reply View | 1 reply
- mwcampbell 4 hours ago
  
  Ah, OK. Honestly, it wouldn't surprise me if Electron made it work by weakening the sandboxing. Someone should look into that though before we assume that's the case.
  
  Reply View | 0 replies