Re: OT: Saving GNU/Linux FOSS in the age of Android and iOS
- To: Bill Cox <firstname.lastname@example.org>
- Cc: email@example.com
- Subject: Re: OT: Saving GNU/Linux FOSS in the age of Android and iOS
- From: Timo Juhani Lindfors <firstname.lastname@example.org>
- Date: Fri, 04 Nov 2011 15:57:52 +0200
- Message-id: <email@example.com>
- In-reply-to: <CAOLP8p73u0ezwzBakSwQ0QZ42tHqE4SHz0M=+1KgyYRfMgmW4g@mail.gmail.com> (Bill Cox's message of "Fri, 4 Nov 2011 09:25:03 -0400")
- References: <CAOLP8p73u0ezwzBakSwQ0QZ42tHqE4SHz0M=+1KgyYRfMgmW4g@mail.gmail.com>
Bill Cox <firstname.lastname@example.org> writes:
> To get there in GNU/Linux, I'm recommending that a basic "app" run in
> a chroot and permissions jail, with hard links to the exact shared
> libraries with which the app was originally built and tested.
I doubt chroot is enough. I think www.qubes-os.org has the technical
bits we need (directly mapping composition buffers from xen virtual
machines to real hardware for maximum isolation and performance).
Would you like to help me package these bits?