4 Commits

Author SHA1 Message Date
Michael Santos
bab762ef2e Move protocol encoding into a separate modules 2014-12-02 07:40:46 -05:00
Michael Santos
c2cd47c7b6 Rename cmd -> call 2014-03-09 09:23:55 -04:00
Michael Santos
e3bd4988c6 Split out calls into separate files 2014-03-08 13:30:59 -05:00
Michael Santos
a9245bae00 alcove: sandbox for erlang ports
alcove acts a proxy between the Erlang VM and a forked process. It can
enforce restrictions on the child process, such as dropping privileges,
setting resource limits and chroot'ing.

The goal is to support Linux namespaces, seccomp mode and cgroups so
the port process can run in an application container.

alcove should be portable though and a subset of the features should
work on any unix, possibly even supporting the sandboxing mechanisms on
other platforms.
2014-03-02 08:59:33 -05:00