jason at jasonayala.com
Thu Aug 8 23:53:42 CEST 2013
Adrelanos recently mentioned AppArmor in the forum in relation
to the latest freedom hosting js exploit. I argue that apparmor is
poorly developed, underpowered, and poorly understood. Real
sandboxing will only happen with a move to Qubes OS. I don't
mean to bring up sandboxing or Qubes OS though, just that
AppArmor isn't worth working on.
(For example, it would NOT have prevented the FH js exploit).
More information about the Whonix-devel