Comment by eptcyka

2 hours ago

Whilst I like getting more control of my hardware, I really prefer if I can contain arbitrary software - sandbox it and compartmentalise it. If arbitrary processes can own your whole system, is anyone truly an owner?

2 comments

eptcyka

Reply
rep_lodsb  1 hour ago

This requires access to hardware registers, so it won't work as non-root or inside a VM.

fsflover  1 hour ago

So you might like Qubes OS, which isolates all apps into hardware-assisted VMs. You will still have all the access from the AdminVM, but arbitrary processes won't.