|
|
|
|
|
by johnnyapol
1832 days ago
|
|
Flatpak achieved this on Linux. There are "portals" which are dispatched and will mount virtual filesystems to permit access to specific files selected by the user. These portals typically are provided by the desktop environment as to resemble to look and feel of the user's choice. There's no kernel-level interface as the OP was alluding to but by combining several other kernel interfaces we can get this kind of sandboxing. |
|