Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Meh, without proper MAC with process namespaces, I guess nothing.

SELinux and whatever Apple is doing looks right IMHO



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: