3 ms·
I don't understand why someone would wrap an untrusted application with their own code vs using something like Systemd's exec capabilities to do the same withou
by unsnap_biceps 11mo ago
I don't understand why someone would wrap an untrusted application with their own code vs using something like Systemd's exec capabilities to do the same without having to have a binary wrapper. What benefits do you see over the systemd solution?
- razighter777 11mo agoSystemd's exec capabilities are great, but don't allow the application developer to dynamically restrict access rights to resources. So you could restrict a text editor for instance to the file it was launched to edit, instead of a hardcoded directory.