Sandboxed applications for Gnome, part 2

http://blogs.gnome.org/aday/2014/07/23/sandboxed-applications-for-gnome-part-2/

by catern • 12 years ago

42 19 12 years ago

blogs.gnome.org

yarrel• 12 years ago

This is mobile app cargo culting. Running untrusted code on your phone is not a good model for desktop software, particularly in UNIX.

weavejester6• 12 years ago

Where in the article does it advocate running untrusted code?

wfunction7• 12 years ago

Absolutely horrible idea. Linux users aren't exactly in desperate need of protection from their computers.

catern• 12 years ago

So, you run as root at all times? :)

wfunction7• 12 years ago

Yes? In fact I hate getting prompted for privileges/passwords/etc. I don't run antimalware either, neither on Linux nor Windows (permanent admin there too). I know what I'm doing when I'm working on the computer and I haven't gotten malware in years.

TD-Linux• 12 years ago

I can't seem to comment on that blog, so I'll write my comment here.

I think this is absolutely a wonderful idea in general and needs to happen soon. Once any program a Linux user is running is compromised, essentially the whole machine is compromised. This is quite unfortunate.

My main complaint is the file chooser dialog. I would much rather see a traditional file chooser - the arguments given for reinventing it don't hold up. You can pass file descriptors between processes. If you want to select a "cloud file", use fuse with some pretty integration, which is just how GNOME 3 does it right now.

Sandboxed applications for Gnome, part 2

Related Stories