3 ms·
Companies can disable the support for Linux apps, and the security measures taken to isolate Linux apps from Chrome OS are excellent (Linux apps are running in
by cbolton 7y ago
Companies can disable the support for Linux apps, and the security measures taken to isolate Linux apps from Chrome OS are excellent (Linux apps are running in an unprivileged container inside a VM that has a stripped down kernel).
There's definitely an increased attack surface inside the VM, but that's kind of unavoidable if you want to have a development environment (what this is marketed for). At least Chrome OS offers a secure way to isolate your development environment from your email/banking/etc processes.
- petilon 7y agoPreviously the CEO only had to ask, are all of my employees using ChromeBooks? Now he also has to ask, are those ChromeBooks all configured for security? It used to be a simple question, which could be answered at a glance. The new question is an order of magnitude harder to answer.
- cbolton 7y agoNot that hard since it's a simple switch by the administrator in the company device policy: https://support.google.com/chrome/a/answer/1375678?hl=en https://support.google.com/chrome/a/answer/1375678?hl=en (See "Virtual Machines") Such a step was already necessary to disable Android apps.