What about OpenGL ?

[bsergean]

What code can native client call ? I doubt dlopen plays well with the
security mode, so would you need a software based OpenGL for example ?

[b...@google.com]

dlopen is not supported -- you're absolutely right that supporting
dlopen would be a little tricky (though not impossible), since the
dynamically loaded code will in turn need to be verified to have the
required safety properties.

the security of NaCl depends heavily upon static verification: it
statically checks that the machine instructions follow rules that
enable reliable disassembly and that the disassembled code only use
safe instructions (and patterns), and a separate run-time handles the
dynamic enforcement that is still required. the docs at
http://nativeclient.googlecode.com/svn/trunk/nacl/googleclient/native_client/scons-out/doc/html/index.html
gives the APIs available to the native client code.

-bsy