3 ms·
Interestingly on virtually all home computers the situation with access control to certain APIs and data is _way_ worse (because basically nobody (I know you're
by RGamma 11y ago
Interestingly on virtually all home computers the situation with access control to certain APIs and data is _way_ worse (because basically nobody (I know you're out there SELinux/AppArmor/grsecurity/etc users) uses it to the extent that would be necessary to provide even basic privacy protection or system security).
I do hope that, when application sandboxing goes mainstream, it is not only going to be used to mitigate dependency hell, but also to provide a nice and featureful (and usable!) interface for filesystem/networking/etc isolation and monitoring with white/black/greylisting and fake permissions (i.e. pretend an application has a permission and return made-up data).
Heck, it'd probably be best to make full isolation of every executable the default and selectively introduce (fake) permissions, such that it just gets the minimum that is needed/desired.
- lqdc13 11y agoCyanogen mod let you give fake permissions for 2 years now. That fixes some of the problems.
- throwaway7767 11y agoI'm a big fan of the Qubes OS project, and I think they're on the right track there: https://www.qubes-os.org/ https://www.qubes-os.org/ Basically, have the desktop environment running in a non-network-connected machine, and have different VMs for different purposes with application windows seamlessly appearing on the desktop. If I have a spotify VM (or even listen in a disposable-removed-on-close VM), there's nothing for them to access. EDIT: Not saying this is for everyone. At this point I would not let my grandmother use it. But I can see the concept becoming very easy to use.