Linux

9849 readers

65 users here now

Welcome to c/linux!

Welcome to our thriving Linux community! Whether you're a seasoned Linux enthusiast or just starting your journey, we're excited to have you here. Explore, learn, and collaborate with like-minded individuals who share a passion for open-source software and the endless possibilities it offers. Together, let's dive into the world of Linux and embrace the power of freedom, customization, and innovation. Enjoy your stay and feel free to join the vibrant discussions that await you!

Rules:

Stay on topic: Posts and discussions should be related to Linux, open source software, and related technologies.
Be respectful: Treat fellow community members with respect and courtesy.
Quality over quantity: Share informative and thought-provoking content.
No spam or self-promotion: Avoid excessive self-promotion or spamming.
No NSFW adult content
Follow general lemmy guidelines.

founded 2 years ago

MODERATORS

[email protected]

Why don't we build a kernel with "app" permissions? (jlai.lu)

submitted 1 week ago* (last edited 1 week ago) by [email protected] to c/[email protected]

18 comments fedilink hide all child comments

I've been thinking. Android implements app permissions on top of Linux, Flatpak does it too. But why is it it's not part of the kernel?

Like all executable files would be sandboxed and would only be able to access syscalls and parts of the file system if they were allowed to. Making sandboxing the default instead of having to restrict programs.

I'm not a kernel developper so this question may be naive, but it bothers my mind. I guess part of it is because of historical reasons but are there any practical ones that make it not feasable?

EDIT : Thank you all for your answers, almost all of you were very nice and explained things clearly

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] -5 points 1 week ago (1 children)

Normally you don't include yourself when asking questions of people who are actually knowledgeable. I was making fun of you saying 'we' and following up by directly saying you aren't part of 'we'.

My point stands. You could make any Linux kernel that you wanted to. Your question isn't 'why haven't we done something' but 'why hasn't somebody done something for me that I probably don't even really want?'

[–] [email protected] 1 points 6 days ago

I was making fun of you...

You don't even know how to use "you", and you have the audacity to be pedantic about OP's use of "we"?

You weren't replying to OP!

And at this moment, you're not talking to the person who commented above. I just thought I would explain that to prevent your further confusion.