3 ms·
It's getting so very old - all I want out of a process is code autocomplete, but I have to grant it read & write permission to my entire disk and network. When
by like_any_other 6mo ago
It's getting so very old - all I want out of a process is code autocomplete, but I have to grant it read & write permission to my entire disk and network. When do we get good permissions and sandboxing and isolation? This can't go on.
- boxedemp 6mo agoI build my own. Maybe I nee to externalize it...
- nextos 6mo agoI agree granting processes permission to read any file is unsustainable. In Linux, sandboxing with Firejail or bwrap is quite easy to configure and allows fine-grained permissions. Also, the new Landlock LSM and LSM-eBPF are quite promising.
- spectrumx 6mo ago[dead]
- quotemstr 6mo agoIt's exhausting because the model that underpins the whole concept is broken