Man who thought opening a TXT file is fine thought wrong

Re:Man who thought opening a TXT file is fine thought wrong by ryandrake on Saturday April 03, 2021 @12:10PM (#26682152)

I don't think "everything is a file" is necessarily bad. What's worse is "every application I run has access to every resource that the OS gives my user access to".

Would be nice if the operating system could set up a fresh, temporary "user" for each application installed, and instead run the application as that user, who starts out with no access to computing resources. Maybe some existing systems already sandbox apps into their own unprivileged users, I don't know, but it would probably be very secure.

[ Parent | on HN ]

Re:Man who thought opening a TXT file is fine thought wrong by Blikkentrekker on Saturday April 03, 2021 @03:15PM (#26683851)

Modern operating systems can; there is quite granular control.

But often when such sandboxes are attempted, it turns out that it often became more complex than originally thought, and applications need many resources which were not originally considered, so they are given those resources, and very often those resources can be used again to construct more resources or otherwise to some measure escape the sandbox.

[ Parent | on HN ]

Re:Man who thought opening a TXT file is fine thought wrong by SamPatt on Monday April 05, 2021 @01:08AM (#26695549)

I believe this is how Qubes OS is supposed to operate.

[ Parent | on HN ]