by Goldorak » Fri Jun 23, 2017 10:34 pm
Goldorak
Fri Jun 23, 2017 10:34 pm
With 3.07, you will have greater access to the internals of Octane even from the lua API. We have added a native C API in 3.07 (still in testing) on top of this, which will allow white listed script nodes to include C as well as lua code, which open the door to just about anything. For user stafety on LiveDB, we will sanbdbox module access, and only allow whitelisted modules to be published as LiveDB entries. This will work across plug-ins, the same way script nodes already do now.
For modules that can edit, send or generate data in the node system from another process (like Phantom Scatter), there will be an IPC interface and API just for this purpose, and we will whitelist modules for this use case as well.
For sideloading 'untrusted' C modules w/ 3.07+ locally, you will have to enable a flag (same as we do now for script nodes). We are looking into ways of sandboxing untrusted C code cleanly so even that could run on ORC or be published into LiveDB down the line.