News for hackers. Stuff that matters.

A comment on Standalone Signal Desktop. Parent comment

Re:Standalone Signal Desktop by noja on Tuesday October 31, 2017 @06:44PM (#15597295)
Can you recommend any distros that use it extensively, or is it too early?
[ Parent | on HN ]
Re:Standalone Signal Desktop by eeZah7Ux on Thursday November 02, 2017 @06:21AM (#15609134)
Ideally upstreams, rather than distributions, should sandbox their own projects.

However, Debian is shipping a number of hardened systemd unit files.

To see some examples on how the sandboxing is being set up you can grep for SystemCallFilter, CapabilityBoundingSet, ProtectSystem, ProtectHome in /lib/systemd/system/*.service

[ Parent | on HN ]