alt Hacker NewsWhilst I like getting more control of my hardware, I really prefer if I can contain arbitrary software - sandbox it and compartmentalise it. If arbitrary processes can own your whole system, is anyone truly an owner?
Replies
fsflover • today at 8:50 PM
So you might like Qubes OS, which isolates all apps into hardware-assisted VMs. You will still have all the access from the AdminVM, but arbitrary processes won't.
This requires access to hardware registers, so it won't work as non-root or inside a VM.