5 ms·
I'd really love to see some of this stuff transition to the desktop too. Like, for example, containerize Skype, so that it can't read my home. Or contain Firef
by hobarrera 9y ago
I'd really love to see some of this stuff transition to the desktop too.
Like, for example, containerize Skype, so that it can't read my home. Or contain Firefox to just read `~/.mozilla` and `~/downloads`.
For binary blobs I don't trust that much, I'd really value this.
For FLOSS stuff, it still provides protection from bugs.
- wasted_intel 9y agoLook at http://flatpak.org http://flatpak.org for precisely that.
- hobarrera 9y agoNope, it does a lot more: it re-packages software, and basically shoves a second package manager down my throat; one that actually bundles dependencies within in package, carrying along all the issues that that flow brings with it. I want to isolate data, no libraries. Libraries are there to be shared.
- nekohacker 9y agoQubes (https://www.qubes-os.org/ https://www.qubes-os.org/) is a good fit for this.
- hobarrera 9y agoYeah, creating a new OS/distribution will never fix the problem. You can't tell people "Oh, just wipe everything clean and installing this other OS". It needs to build on top of what we have, otherwise adoption will never take place.
- viraptor 9y agoApparmor does that for you. Or selinux, depending on your distro.
- digi_owl 9y agoFirejail.
- runeks 9y agoProblem is it's sometimes more annoying than helpful, e.g. having to copy files into the ~/.mozilla directory in order to be able to upload them to Dropbox via Firefox, or attach to an email.