alt Hacker NewsAlso, operating systems should let us set filesystem permissions per app/process/executable instead of just user accounts.
Similar to how macOS/iOS Sandboxing works but at a more lower and granular level
Replies
strbean • today at 8:32 PM
https://www.canyonroad.ai/ does some of this in a way tailored to agents.
pianopatrick • today at 9:09 PM
personally I wish the OS would allow syscall filtering per user
Jhater • today at 7:40 PM
[dead]
SELinux is basically this.