2 ms·
NixOS might solve dependency issues but it doesn't provide isolation. Currently in a one-user system every app has access to all of user's data and hardware ser
by codedokode 5y ago
NixOS might solve dependency issues but it doesn't provide isolation. Currently in a one-user system every app has access to all of user's data and hardware serial numbers. And Linux was not built with a principle of minimum privileges in mind, so for example a PDF viewer can read browser cookies or stored passwords.
- smoldesu 5y agoThis is a problem that also exists in many Flatpaks: plenty of applications get carte-blanche access to the OS filesystem, and "breaking out" with symlinks or chained attacks has proven trivial over the years. There are so many of these exploits that they simply stopped patching them after a certain point. Isolation is much better provided by other tools like Firejail.