4 ms·

QubesOS? I would love to know the answer, but I think it is going to be a long time before we have proper application sandboxing on Linux. The browser is likel

QubesOS? I would love to know the answer, but I think it is going to be a long time before we have proper application sandboxing on Linux. The browser is likely the biggest threat vector running on my machine, yet there are no easy ways to lock it down to just reading/writing Downloads and its own cache.

bombcar 3y ago
That's part of the problem, but remember your browser has all your cookies and such - the sites that keep you logged in even when you close the window (like email). So if anything else can read the browser's data, it can get that.
hwbunny 3y ago
AppArmor is fairly easy.