{"action":"created","issue":{"url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/236","labels_url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/236/labels{/name}","comments_url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/236/comments","events_url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/236/events","html_url":"https://github.com/sandstorm-io/sandstorm/issues/236","id":56243675,"number":236,"title":"Create documentation on Sandstorm's current security/isolation features","user":{"login":"paulproteus","id":25457,"avatar_url":"https://avatars.githubusercontent.com/u/25457?v=3","gravatar_id":"","url":"https://api.github.com/users/paulproteus","html_url":"https://github.com/paulproteus","followers_url":"https://api.github.com/users/paulproteus/followers","following_url":"https://api.github.com/users/paulproteus/following{/other_user}","gists_url":"https://api.github.com/users/paulproteus/gists{/gist_id}","starred_url":"https://api.github.com/users/paulproteus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/paulproteus/subscriptions","organizations_url":"https://api.github.com/users/paulproteus/orgs","repos_url":"https://api.github.com/users/paulproteus/repos","events_url":"https://api.github.com/users/paulproteus/events{/privacy}","received_events_url":"https://api.github.com/users/paulproteus/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-02-02T14:35:52Z","updated_at":"2015-02-02T23:57:57Z","closed_at":null,"body":"There are a number of blog posts describing security-related aspects of Sandstorm's design:\r\n\r\n* https://blog.sandstorm.io/news/2014-08-11-roundcube.html talks about the importance of single sign-on.\r\n\r\n* https://blog.sandstorm.io/news/2014-08-13-sandbox-security.html talks about the small number of device nodes, seccomp-bpf, and future plans to move ELF parsing into userspace.\r\n\r\n* https://blog.sandstorm.io/news/2014-07-03-team-update.html discusses UID namespaces.\r\n\r\nThere are other security measures I couldn't quickly find a reference for:\r\n\r\n* One-time-use subdomains, for app instances.\r\n\r\n* Future plans to use Content-Security-Policy.\r\n\r\n* IFRAME layer to prevent apps from leaking information to the world.\r\n\r\nWe would do well to convert this into a wiki page that lists at least the current security features, so that app developers and prospective users can better-understand how (and why) Sandstorm works.\r\n\r\nHaving this public document might also help people believe Sandstorm isn't \"magic\" (see also https://news.ycombinator.com/item?id=8972066 )."},"comment":{"url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/comments/72565083","html_url":"https://github.com/sandstorm-io/sandstorm/issues/236#issuecomment-72565083","issue_url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/236","id":72565083,"user":{"login":"kentonv","id":4001805,"avatar_url":"https://avatars.githubusercontent.com/u/4001805?v=3","gravatar_id":"","url":"https://api.github.com/users/kentonv","html_url":"https://github.com/kentonv","followers_url":"https://api.github.com/users/kentonv/followers","following_url":"https://api.github.com/users/kentonv/following{/other_user}","gists_url":"https://api.github.com/users/kentonv/gists{/gist_id}","starred_url":"https://api.github.com/users/kentonv/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kentonv/subscriptions","organizations_url":"https://api.github.com/users/kentonv/orgs","repos_url":"https://api.github.com/users/kentonv/repos","events_url":"https://api.github.com/users/kentonv/events{/privacy}","received_events_url":"https://api.github.com/users/kentonv/received_events","type":"User","site_admin":false},"created_at":"2015-02-02T23:57:57Z","updated_at":"2015-02-02T23:57:57Z","body":"This post discusses one-time subdomains:\r\n\r\nhttps://blog.sandstorm.io/news/2014-07-24-tinytinyrss-plus-security-discussion.html"}}