3 ms·
The standard (and ubiquitous) way on UNIX/Linux is to run each program as a different dedicated user. Complete separation.
by jjav 5y ago
The standard (and ubiquitous) way on UNIX/Linux is to run each program as a different dedicated user. Complete separation.
- boring_twenties 5y agoEven if you do that, they all connect to the same X server. There's the X11 security extension, which offers the concept of "untrusted" clients, but many programs won't work with it. For example, Firefox segfaults regularly if run as an untrusted client.