The pragmatic reason is that the runtime should have more permissions than the c... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

afiori 10 months ago | parent | context | favorite | on: Modern Node.js Patterns

The pragmatic reason is that the runtime should have more permissions than the code, eg in node require('fs') likely read files in system folders

eddd-ddde 10 months ago [–]

Not necessarily, in selinux for example you would configure a domain for the "main process" which can transition into a lower permission domain for "app" code.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact