logoalt Hacker News

ameliusyesterday at 9:56 PM2 repliesview on HN

I'm not surprised by news like this anymore. When will Linux distributions properly sandbox our applications?

Our phones have had a better permission system for years.


Replies

drnick1today at 1:00 AM

Linux generally presumes that you run trusted software, not some proprietary program that is approximately malware. If you want a "sandbox" run that program as a separate unprivileged user or use bubblewrap.

Gander5739yesterday at 10:59 PM

Android allows apps to read from the clipboard at will, though it does show a toast. GrapheneOS, I believe, asks for permission first.

show 1 reply