任何人都可以放一些轻如什么在软糖[机器人]引入Isolatedprocess标签内的服务的真实/主要优势。 这是有利的框架级或在内核级别，正如我们所看到的服务中设置isolatedProcess标签值真分配一个新的用户id到该服务的过程。

Can anyone put some light as what's the real/main advantage of introducing Isolatedprocess tag within Services in JellyBean[Android]. Is this advantageous at framework level or at the kernel level,as what we have seen that setting isolatedProcess tag value "true" within the Services assigns a new userId to that service process.

推荐答案

你见过的在谷歌论坛戴安娜Hackborn 的答案吗？现在的问题是相同的，因为她指出真的是有一个已知的使用该标志，此时：增加了一层安全的执行远程，不受信任的code，即JavaScript的。有没有办法有可能保证运行的远程code将不会引入安全漏洞，因此通过隔离这一分析是code在权限中，少流程的过程中，它变得更加困难为code到什么负面影响。

Have you seen Dianne Hackborn's answer on Google Groups? The question is identical and as she points out there is really one known use of that flags at this time: adding a layer of security for executing remote, untrusted code, i.e. JavaScript. There is no way to possibly guarantee that running remote code won't introduce security vulnerabilities, so by isolating the process that parses that code in a permission-less process, it becomes much more difficult for that code to do any real harm.