jGuard is a capability-based security framework for the JVM (JDK 21+) designed for running untrusted or semi-trusted code after the removal of the Java SecurityManager.
Policies are declared using a module-style descriptor inspired by module-info.java, and enforcement happens at the JDK operation level (filesystem, network, threads, native loads).
Happy to answer questions about the threat model, design tradeoffs, or how this compares to the legacy SecurityManager.
"In an era where businesses are continually striving to optimize expenses, Lucenia addresses a critical market gap – reducing cloud spend. Many organizations find themselves grappling with soaring costs associated with 24/7 'always running' cloud services..."
Community feedback and involvement is incredibly important to the OpenSearch maintainers. So I'm trying to gather as much of the thoughts and sentiment of the community as possible.
So, if OpenSearch were to move to a foundation which would you prefer? Specify in comments other preferences.
jGuard is a capability-based security framework for the JVM (JDK 21+) designed for running untrusted or semi-trusted code after the removal of the Java SecurityManager.
Policies are declared using a module-style descriptor inspired by module-info.java, and enforcement happens at the JDK operation level (filesystem, network, threads, native loads).
Happy to answer questions about the threat model, design tradeoffs, or how this compares to the legacy SecurityManager.