Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 06 Oct 2020 22:22:59 +1100
From: Michael Ellerman <>
To: Solar Designer <>,
Subject: Re: major changes if gnu/linux dominates the desktop and/or mobile market?

Solar Designer <> writes:
> Hi all,
> As a moderator I approved all messages in this thread so far, but I am
> unhappy about the quality of both Georgi's message and the replies.
> This is a valid topic, but there's no room in it for trolling (that's
> how Georgi's message came across, even if maybe unintentionally) nor for
> responding only about the presumed trolling.  Just assume good faith and
> post a response that's actually useful to others in here.  I'll try:
> On Mon, Oct 05, 2020 at 03:02:33PM +0300, Georgi Guninski wrote:
>> Are there major security changes needed if
>> gnu/linux dominates the desktop and/or mobile phone
>> markets?
> I'd say yes, major security changes are needed.


> On the desktop, major Linux distributions (and by the way *BSDs and
> Solaris are not very different in this respect, I think) when used as
> single-user desktop systems lack security isolation between applications
> of the user.

You can get some isolation fairly easily using firejail.

It's not as secure as eg. Qubes, but it's available in most distros and
can be as simple as sticking "firejail" in front of a command.

You can use it to isolate your browser/irc/mail client, or possibly more
importantly your build environment, from your wider home directory.

As usual the arch wiki has good doco:


Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.