3 ms·
My dream, a OS with a good proper well designed single capability system with reasonable defaults. Not the mess Linux has which supports capabilities for some
by dathinab 6y ago
My dream, a OS with a good proper well designed single capability system with reasonable defaults.
Not the mess Linux has which supports capabilities for some privileges but not so much for others, which has bad defaults and which is supper fragmented. I mean for a full cover you need to correctly combine root/sys capabilities with seccomp with bpf with cgroups with polkit with some pctrl settings with linux kernel parameters and even then you probably still need to throw in selinux and I still missed at least file permissions when writing this...
Which lets be honest is just ridiculous.