4 ms·
That's not strictly true on Linux: you could use AppArmor/SELinux to remove capabilities from programs. Surely not as user friendly as they could be but the cap
by shock 11y ago
That's not strictly true on Linux: you could use AppArmor/SELinux to remove capabilities from programs. Surely not as user friendly as they could be but the capability is there.
- tokenizerrr 11y agoYou can do that, but there is no way for an application to "ask" access to anything. You need to fully know how the application works, where it wants to read/write etc. I consider this under the hacking something together using 'sandboxing' portion of my post, since it's not something that will work for your regular user. (Don't get me wrong, I think it's awesome but sadly not the same as a permission system)