4 ms·
macOS. Not much interested in VMs, for efficiency. Yeah I was playing with a separate user account, could get some basics working but I wonder how far could I
by vemv 8y ago
macOS. Not much interested in VMs, for efficiency.
Yeah I was playing with a separate user account, could get some basics working but I wonder how far could I get with that.
What are the bigger security risks for that approach? Assuming constrained file permissions, and that no secrets are in ENV (https://gist.github.com/telent/9742059 https://gist.github.com/telent/9742059 )
- angry_octet 8y agoA normal user has full access to the kernel API. Always kernel info leaks, occasional easy exploits. On macos you can use Apple's native sandboxing. See for example http://mybyways.com/blog/creating-a-macos-sandbox-to-run-kodi http://mybyways.com/blog/creating-a-macos-sandbox-to-run-kod...