colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

elaborate todo about securing programs

Browse Source
This commit is contained in:
Colin
2023-06-28 01:08:53 +00:00
parent f12672b197
commit c09b2d0d63
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
TODO.md
View File

@@ -34,6 +34,9 @@
- have `sane.programs` be wrapped such that they run in a cgroup? - have `sane.programs` be wrapped such that they run in a cgroup?
- at least, only give them access to the portion of the fs they *need*. - at least, only give them access to the portion of the fs they *need*.
- Android takes approach of giving each app its own user: could hack that in here. - Android takes approach of giving each app its own user: could hack that in here.
- flatpak does this, somehow
- apparmor? SElinux? (desktop) "portals"?
- see Spectrum OS; Alyssa Ross; etc
- canaries for important services - canaries for important services
- e.g. daily email checks; daily backup checks - e.g. daily email checks; daily backup checks