Can you tell us what happens on the "sandbox all the things" goal? I think this is a ...

2025-01-18 14:44:38 UTC

Can you tell us what happens on the "sandbox all the things" goal?

I think this is a pretty crucial step forward, even though #sandbox technologies (most often through user namespaces) are more problematic than I initially thought.

(Basically, user #namespaces open up #privesc to the monolithic #kernel, which is incredible. #Android and #ChromeOS use #LXC, mounts and #SELinux for #sandboxing)

Author Public Key

npub16962zl9d6a8hfhqnuazd6k7q6wh3cy9xp3htzvxqhdez09l8qxps725zzp

Seen on

wss://relay.momostr.pink

Show more details

Published at

2025-01-18 14:44:38 UTC

Kind type

1 Short Text Note

Event JSON

{ "id": "8e5657345de760ecff37c504d3ae62b7f7de781a37d7587102d80013862b65b6", "pubkey": "d174a17cadd74f74dc13e744dd5bc0d3af1c10a60c6eb130c0bb722797e70183", "created_at": 1737211478, "kind": 1, "tags": [ [ "proxy", "https://tux.social/@Rhababerbarbar/113849891448908723", "web" ], [ "t", "chromeos" ], [ "t", "sandboxing" ], [ "t", "android" ], [ "p", "9e08b3c59e6dd35e3ff9c686f92cb1ed46077799c533cd3baae8b3b3c20777bf" ], [ "t", "kernel" ], [ "e", "ac56d75116bc2517b26638597f2b7e9ba7cb5a446d68d63509c9b42e1eb1ceb6", "", "root", "9e08b3c59e6dd35e3ff9c686f92cb1ed46077799c533cd3baae8b3b3c20777bf" ], [ "t", "privesc" ], [ "t", "namespaces" ], [ "t", "sandbox" ], [ "p", "07fa27069a82a1517083661f13e0d286330edffd612926976ad28b61cdb76eb6" ], [ "t", "lxc" ], [ "t", "selinux" ], [ "proxy", "https://tux.social/users/Rhababerbarbar/statuses/113849891448908723", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://tux.social/users/Rhababerbarbar/statuses/113849891448908723", "pink.momostr" ], [ "-" ] ], "content": "Can you tell us what happens on the \"sandbox all the things\" goal?\n\nI think this is a pretty crucial step forward, even though #sandbox technologies (most often through user namespaces) are more problematic than I initially thought.\n\n(Basically, user #namespaces open up #privesc to the monolithic #kernel, which is incredible. #Android and #ChromeOS use #LXC, mounts and #SELinux for #sandboxing)", "sig": "c790fba6fa19b00fc81b99b5aba6610577cbee8e25b9482b6c577d55c63c7f4fbf388fec53fcc5c056f92c04ce7d5cf42bae27b28437c1df0b41516206756d0d" }

boredsquirrel on Nostr: Can you tell us what happens on the "sandbox all the things" goal? I think this is a ...