News for hackers. Stuff that matters.

A comment on Reasons to prefer Linux over Windows (2014). Parent comment

Re:Reasons to prefer Linux over Windows (2014) by josephcsible on Sunday November 15, 2020 @06:40PM (#25106100)
> Linux is now the least secure desktop OS available

[citation needed]

> limited sandboxing

seccomp? Namespaces? What exactly do you want Linux to be able to sandbox that it can't?

> no provision for checking binary signatures

Bootloaders already enforce this for the kernel, and the kernel can enforce it for its own modules. Userlands are free to enforce it for userspace programs (e.g., how Android requires APKs to be signed).

[ Parent | on HN ]
Re:Reasons to prefer Linux over Windows (2014) by bitwize on Sunday November 15, 2020 @07:43PM (#25106604)
Those are toolkits to sandbox processes, but I'm talking in terms of complete solutions. Linux has Snaps and Flatpak, but the modern distros lack in solutions to enforce sandboxing policies systemwide against arbitrary binaries.
[ Parent | on HN ]