3 ms·
The Linux sandboxing features are mostly quite poor tbh. Compare to Apple's stack (if you include the private SBPL) and it doesn't come close. Apple is way ahea
by mike_hearn 3y ago
The Linux sandboxing features are mostly quite poor tbh. Compare to Apple's stack (if you include the private SBPL) and it doesn't come close. Apple is way ahead of both Windows and Linux when it comes to pervasive sandboxing.
- yjftsjthsd-h 3y agoI'm not super familiar with Darwin, but I am skeptical on the grounds that macOS doesn't have containers, which are constructed from the same primitives as a sandbox.
- mike_hearn 3y agoIt does indeed have something similar to containers, built on their sandboxing tech rather than namespaces. Take a look in ~/Library/Containers to see the Apple equivalent.