2 ms·
Privilege separation for applications is not the same as having separate user accounts. > but instead of simplifying multi-user support to a single user, we ac
by AnIdiotOnTheNet 5y ago
Privilege separation for applications is not the same as having separate user accounts.
> but instead of simplifying multi-user support to a single user, we actually need to make it more complex to properly handle multi-user-per-process separation.
I disagree. This is such a small and vanishing use case that adding complexity for it is exactly what you shouldn't do.
- em-bee 5y agoPrivilege separation for applications is not the same as having separate user accounts. true, and yes, maybe the whole system needs to be redesigned for that. but nevertheless, this needs to happen in the kernel. and once we have proper process separation, adding multi-user support on top of that seems almost trivial.