Originally posted by Weasel
View Post
Originally posted by Weasel
View Post
Originally posted by Weasel
View Post
Originally posted by Weasel
View Post
Originally posted by Weasel
View Post
Originally posted by Weasel
View Post
Kind of sandboxiing around applications starts on windows with windows 2000 and extended on Vista. https://en.wikipedia.org/wiki/Window...rce_Protection
This is not a full blown sandbox But this prevents third party apps that have not had approve from overwrite core system files and causing system to fail. If you look at OS X dmg handling you find it doing the same things. This has nothing to-do with tablet use of computer. Its what you have to-do to support installing third party applications from non certified sources so they don't ruin your OS. The earliest form of this file system sandboxing appears on Unix with chroot of course this never matured into easy to use end user solution.
Yes flatpak also is protect the user home directory so that a flatpak application configuration files do not overwrite the same application installed by distributions configuration files. Done in ways that this is not even possible with a coder error. Then due to issue with items provide over dbus you need to sandbox this as well. Now its not very much more of a step to go stuff it and do a full sandbox.
Wayland limiting down what applications can see was not just done for security. This was done in the theory that correct written applications could keep on running even if the compositor crashed and reconnect to the compositor when it restarted. So that the data lost inside the compositor due to crash should not be harmful to application.
Originally posted by Weasel
View Post
Wayland done right should be more durable than X11. Due to what gnome and others have done there is high odds that something like xpra will have to made for wayland to wrap wayland applications to restore the crash isolation that is in the standard. Of course lack of proper buffer management in kernel by Nvidia also gets in way of proper crash isolation in Wayland.
Comment