The secured Sandbox maybe? The windows sandbox is pretty awesome for day to day use imo. And no a template VM or container isnt really the same thing. The sandbox has the task of making sure that there is nothing that can break out. Afaik the sanbox has done a pretty good job so far in that aspect.
Does linux bring a comparable option to the table? Would love to find out, changig as many aspects of my life to linux is the best thing to do.
People really dislike it when you point this out, But the security model on Linux is lacking. Yes, we have things like apparmor and SELinux, but compare it to sandboxd on macOS. The windows sandbox isn’t perfect, but it’s really user-friendly, and it works in most cases. Linux doesn’t have a direct equivalent. We’ve made great strides with making immutable distros through things like flatpack, and snap, but something that they failed to do is implement a least privilege model that is as robust as sandboxd on macOS.
Podman container completely closed off. ChromeOS shows that everything is possible on Linux (their Linux integration is a VM, running a container with the Distro, and the apps are displayed over wayland on the local host)
The secured Sandbox maybe? The windows sandbox is pretty awesome for day to day use imo. And no a template VM or container isnt really the same thing. The sandbox has the task of making sure that there is nothing that can break out. Afaik the sanbox has done a pretty good job so far in that aspect. Does linux bring a comparable option to the table? Would love to find out, changig as many aspects of my life to linux is the best thing to do.
People really dislike it when you point this out, But the security model on Linux is lacking. Yes, we have things like apparmor and SELinux, but compare it to sandboxd on macOS. The windows sandbox isn’t perfect, but it’s really user-friendly, and it works in most cases. Linux doesn’t have a direct equivalent. We’ve made great strides with making immutable distros through things like flatpack, and snap, but something that they failed to do is implement a least privilege model that is as robust as sandboxd on macOS.
https://duckduckgo.com/?t=ffab&q=sandboxing+on+linux&ia=web
I can understand disqualifying VMs, but why wouldn’t a container be that?
I feel like android did that first, but I’m not sure.
Podman container completely closed off. ChromeOS shows that everything is possible on Linux (their Linux integration is a VM, running a container with the Distro, and the apps are displayed over wayland on the local host)
There simply is no good GUI integration