One area where OpenBSD and Linux distribution have made a lot of progress in recent years is in sandboxing applications, closing off the running program from the rest of the operating system. This is often used internally by a program to reduce its own sysetm access or by a sandboxing utility to isolate a running program which might misbehave. One developer is working to bring these types of program isolation to FreeBSD. "Since a while I've been working on and off on a pledge()/unveil() implementation for FreeBSD. I also wanted it to be able to sandbox arbitrary programs that might not expect it with no (or very minor) modifications. So I just kept adding to it until it could do that well enough. " The mailing list post goes on to show examples of the new isolating software at work with instances of command line programs and some desktop software being sandboxed.
TUXEDO Computers - Linux Hardware in a tailor made suite Choose from a wide range of laptops and PCs in various sizes and shapes at TUXEDOComputers.com. Every machine comes pre-installed and ready-to-run with Linux. Full 24 months of warranty and lifetime support included!
Star Labs - Laptops built for Linux.
View our range including the highly anticipated StarFighter. Available with coreboot open-source firmware and a choice of Ubuntu, elementary, Manjaro and more. Visit Star Labs for information, to buy and get support.
Starting at US$4.95 per month, 7-day money-back guarantee
Contact, corrections and suggestions: Jesse Smith
Tips: bc1qtede6f7adcce4kjpgx0e5j68wwgtdxrek2qvc4 lnurl1dp68gurn8ghj7ampd3kx2ar0veekzar0wd5xjtnrdakj7tnhv4kxctttdehhwm30d3h82unvwqhhxarpw3jkc7tzw4ex6cfexyfua2nr 86fA3qPTeQtNb2k1vLwEQaAp3XxkvvvXt69gSG5LGunXXikK9koPWZaRQgfFPBPWhMgXjPjccy9LA9xRFchPWQAnPvxh5Le PayPal.me/distrow • Patreon.com/distrowatch