3 ms·
Sandboxing that is both secure and allows non trivial application software to work correctly is HARD. I'm not convinced anyone actually got both right so far -
by m4rtink 5y ago
Sandboxing that is both secure and allows non trivial application software to work correctly is HARD.
I'm not convinced anyone actually got both right so far - see how recent sanboxing improvements basically killed Anbox on modern Android versions. Or try to get a ssh/samba server running on a Samsung Galaxy device so you can push files to it to avoid buggy inconvenient MTP - mission impossible!
- elihu 5y agoIt's not easy, and probably involves rethinking things like the basic assumptions of a traditional POSIX-style environment. But I think it's a necessary feature these days, and I hope it eventually becomes commonplace in Linux, or perhaps there will one day be a plausible Linux-replacement.