Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

CLI is one thing, but for GUI apps, OS X has supported sandboxing for years, enforcing it on all Mac App Store apps against developer outcry.

On Linux, GNOME is working on something that looks quite a bit like how OS X did it:

https://wiki.gnome.org/Projects/SandboxedApps

So I think we're actually moving in the right direction, albeit extremely slowly and imperfectly.



The problem with Mac App Store sandboxing is that it is not configurable and therefore many apps are simply unusable or extremely annoying sandboxed.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: