2 ms·
Good for them :) These type of workarounds seems to point to people giving up in having secure applications, so much for the move to rust. So the path is to h
by jmclnx 4y ago
Good for them :)
These type of workarounds seems to point to people giving up in having secure applications, so much for the move to rust. So the path is to having applications in a walled garden. But who cares if all the plants in that garden is infested with aphids, at least they can say it won't spread. Well, time will tell on that. But, I hope application developers keep an eye on portability. There is more to the world than Linux.
OpenBSD is avoiding all this complexity of Flatpack, snap, docker and all these attempts at contains. To me, pledge(2) and unveil(2) is far more secure and easier to use than what Linux is doing. And I think for containers, nothing still comes close to FreeBSD jails.
- Zurrrrr 4y agoIt's funny you mention OpenBSD and pledge/unveil, because they don't really come close enough to being able to lock down the system, while linux has things like SELinux/RSBAC available.