Hacker News new | ask | show | jobs
by fouric 1740 days ago
When you say:

> the Linux phone distros are not there yet

Is there any indication that Linux is going to catch up to Android/iOS in terms of security?

From my perspective, not only has Linux userspace security barely improved at all over the past few decades (almost all programs run as the user with all of their privileges, no sandboxing, barely any permission/access control to speak of (and yes, I know that there are some projects that aim to fix this, but they're all woefully immature and barely adopted)), but the Unix philosophy itself seems opposed to these security measures. Am I just being overly pessimistic?

1 comments

I like to think there are some groups thinking about these problems.

Could using something like Fedora Silverblue or OpenSUSE MicroOS (immutable OSes) plus Flatpak (containerized apps) plus SELinux (access controls) get you almost there?

These already exist, but I've seen the push back to the concepts in real life among admins around me, so I wouldn't expect the mass adoption it'd need to stabilize anytime soon. I'm not even including the Internet rage and arguments about these technologies.

No an immutable OS does not help, also flatpak is necessary and selinux not powerful enough. You just need sandboxing.