First fully sandboxed Linux desktop app!

No kidding...

Its not a secret that I’ve been working on sandboxed desktop applications recently. In fact, I recently gave a talk at devconf.cz about it. However, up until now I’ve mainly been focusing on the bundling and deployment aspects of the problem. I’ve been running applications in their own environment, but having pretty open access to the system.

Now that the basics are working it’s time to start looking at how to create a real sandbox. This is going to require a lot of changes to the Linux stack. For instance, we have to use Wayland instead of X11, because X11 is impossible to secure. We also need to use kdbus to allow desktop integration that is properly filtered at the kernel level.

Recently Wayland has made some pretty big strides though, and we now have working Wayland sessions in Fedora 21. This means we can start testing real sandboxing for simple applications. To get something running I chose to focus on a game, because they require very little interaction with the system. Here is a video I made of Neverball, running in a minimal sandbox: 

Read more... 

Da Boss!

Website: www.digitalsmind.com Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Latest Content

  • Slip your head into a huge noise-isolating helmet
    Written by

    Da Boss!

    Slip your head into a huge noise-isolating helmet Huh...so the Flintstones Gazoo helmet is now available to purchase.…
    Read more...
  • Consumer Reports stops recommending Microsoft Surface PCs over reliability concerns
    Written by

    Da Boss!

    Consumer Reports stops recommending Microsoft Surface PCs over reliability concerns I have to laugh a little at this. What do…
    Read more...
  • Microsoft reveals new Windows 10 Workstations edition for power users
    Written by

    Da Boss!

    Microsoft reveals new Windows 10 Workstations edition for power users Well, it's about damn time!
    Read more...
  • Alienware Area-51 Ryzen Threadripper Edition Hands-On With Benchmark Annihilation
    Written by

    Da Boss!

    Alienware Area-51 Ryzen Threadripper Edition Hands-On With Benchmark Annihilation Um...DAMN! Threadripper is no slouch that's for sure! WOW! Sure, this…
    Read more...
  • Fecal Bacteria Found In Drinks Sold By Major Fast Food Restaurants Like McDonald's
    Written by
    Fecal Bacteria Found In Drinks Sold By Major Fast Food Restaurants Like McDonald's Welp, there goes the "yes" when I am asked if…

Visit the Digitalsmind Video YouTube Page!

Did you know we have a video page on YouTube? 

Well... WE DO! 

Check us out! 

- Our Video page.