4 ms·
In addition to the problems mentioned there, the sandbox capability is deficient; there does not seem to be any reasonable way to do things such as: - Dealing
by zzo38computer 4y ago
In addition to the problems mentioned there, the sandbox capability is deficient; there does not seem to be any reasonable way to do things such as:
- Dealing with non-Unicode text (including file names).
- Running external user-specified programs by pipes (popen), and/or user-specified dynamic libraries.
- Sandboxed X resource manager access and X toolkit intrinsics.
- Because it uses systemd, all of the problems of systemd also apply.
The design of D-Bus is also full of problems.
I do not use a desktop environment on my computer, and I should not need one. Programs should not need to draw their own window decorations. There are other issues, too (some of which are mentioned on the web page about the security problems). GTK also has many problems.
The blue "sandboxed" icon is not very good if it does not elaborate the specifics of the sandboxing (and, ideally, should allow user customization of the sandbox settings).
The system should not make it difficult for programs to be used together. Unfortunately, many programs do (although I try to fix this; use of user-specified commands with popen is one thing that should help, but some things will just need much of the existing designs to be corrected or entirely replaced).
- yjftsjthsd-h 4y ago> Because it uses systemd, all of the problems of systemd also apply. It works on Void and Alpine, though? Are you saying that the security model is degraded there?