 |
Post An3f4jyTy9S8KLdmm8 by [email protected] |
 |
More posts by [email protected] |
|
Post #An23u0lZJ5H9l4f3PE by [email protected] |
|
0 likes, 1 repeats |
|
|
|
說說俺這幾天還體驗了一下一個基於虛擬機的 Linux：Qubes OS �… |
|
|
|
Post #An24194Iq0tFXApFyK by [email protected] |
|
0 likes, 1 repeats |
|
|
|
但老實說俺在 NixOS 上也卡卡的，在想要不要 hop 回去 :ablob… |
|
|
|
Post #An29iCEPSA2FZCtuBE by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@rbr apparmor感觉日常够用了如果不需要整个操作系统都隔离的… |
|
|
|
Post #An3Uu05Qj2uRZS89Ka by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@_ZN4pari4yumeE 素，但它是默認設定就開了 10+ 個 VM（沒記錯的�… |
|
|
|
Post #An3f4jyTy9S8KLdmm8 by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@rbr @_ZN4pari4yumeE 但是现在systemd提供的隔离也已经很够用了吧… |
|
|
|
Post #An3j8s9Hv2MCecv8sq by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@hLymfX @rbr 这些是保护服务的吧 日常使用每个程序一个用户�… |
|
|
|
Post #An3qMhBmACpAOccg0e by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@_ZN4pari4yumeE @rbr MAC有必须要使用的场景，不过感觉对于很多�… |
|
|
|
Post #An3qMhQfGqjZ8naZDU by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@hLymfX @rbr 怎么说呢，，看个人吧:ablobcatbounce: 小透明觉�… |
|
|
|
Post #An3qaLk4hOwFvzB0vQ by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@_ZN4pari4yumeE @rbr 我大概是不够聪明搞不明白MAC，所以直接如�… |
|
|
|
Post #An3v9WWeztGpKavi2S by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@rbr @hLymfX 举个现实例子：用户级的隔离就像access card，有it a… |
|
|
|
Post #An4fsan8a0K5U446wy by [email protected] |
|
0 likes, 0 repeats |
|
|
|
- 控制文件系统的访问 read, write, link, mmap都有单独的控制，�… |
|
|
|
Post #An4fsb0xkbNkAwX9V2 by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@_ZN4pari4yumeE 好詳細的資料 :A_BlobCat_Heart: 俺之後仔細研�… |
|
|
|
Post #An4fsbBb73tAhvVe4m by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@rbr 真的要白名单的话可能还是得全局mac上才能effective，但�… |
