4 ms·
> I owe the internet a write up. I would definitely be interested in reading more about this. I love the idea of being able to prevent an application from wri
by justin_oaks 3y ago
> I owe the internet a write up.
I would definitely be interested in reading more about this.
I love the idea of being able to prevent an application from writing all over my disk to random places. If I can't prevent it, I can at least remedy it by having all those changes go away with a reboot.
One of the things I love about Docker containers is that they can be ephemeral or persistent, short or long term, have full network access or no access, allowed to write to the host system or stuck writing to its own file system only.
I'm in control instead of the application.
- mixmastamyk 3y agoTypically they can only write to home and temp. That can be improved via sandboxing, and there’s Little/Open Snitch as well.
- tlavoie 3y agoAges ago, I tried out Puppy Linux, that ran from a burned CD. If I made updates, it wrote another filesystem extent to the disc, and I think the loading process just used those to over-write files as needed until the boot completed. I was thinking of it for a home firewall at the time, but in any case, it made for a very ephemeral system.