Yes, indeed when I was first thinking about sthg. like that few years ago and mentioned to a friend, he told me I am mad. And this obsession now came back…
What does a C virtual machine need? It needs a C code translator, and a sandbox environment where to run the translated code securely.
And how can you have a secure (for the host) sandbox environment? There are two solutions:
* any ptrace based solution (like umview)
* or the mysterious system call prctl system call
And it seems that the “I want to do everything” company is already hungry to promote there “my browser is everywhere”, but having it running fast and reliable with all kind of foreign plugins.
I love this idea, and I wish java will die out one day. Sun’s days are over, oracle will kill it anyway
see also:
* http://lwn.net/Articles/332990/
* http://lwn.net/Articles/332974
* http://code.google.com/p/seccompsandbox/wiki/overview
* http://www.kernel.org/doc/man-pages/online/pages/man2/prctl.2.html
* http://www.stanford.edu/~talg/papers/traps/abstract.html
* http://code.google.com/p/chromium/wiki/LinuxSandboxing
* http://nativeclient.googlecode.com/svn/trunk/src/native_client/documentation/npapi.html
* http://en.wikipedia.org/wiki/AppArmor
* http://en.wikipedia.org/wiki/Security-Enhanced_Linux