4 ms·
Also, operating systems should let us set filesystem permissions per app/process/executable instead of just user accounts. Similar to how macOS/iOS Sandboxing
by Razengan 2mo ago
Also, operating systems should let us set filesystem permissions per app/process/executable instead of just user accounts.
Similar to how macOS/iOS Sandboxing works but at a more lower and granular level
- Jhater 2mo ago[dead]
- Retr0id 2mo agoSELinux is basically this.
- dumbfounder 2mo agoIs that the service that everyone turns off as the first step of setting up their new Linux box?
- Retr0id 2mo agoIt's the LSM that billions of Android users use every day.
- strbean 2mo agohttps://www.canyonroad.ai/ https://www.canyonroad.ai/ does some of this in a way tailored to agents.
- pianopatrick 2mo agopersonally I wish the OS would allow syscall filtering per user
- dare944 2mo agoI use seccomp filters on linux in my AI sandbox.
- pianopatrick 2mo agoYeah, I just wish seccomp worked per user. So you could define a policy of which users can do which syscalls, and then that follows them no matter which application they start.