沙盒操作系统
在当今的大多数操作系统上，默认情况下，当我们安装程序时，它会被授予对许多它可能不需要的资源的访问权限，并且它的用户可能不打算授予它访问权限。例如，当一个人安装一个闭源程序时，原则上没有什么可以阻止它读取 ~/.ssh 中的私钥并将其通过互联网发送给恶意第三方，除非如果用户是精通使用跟踪程序的安全专家，他很可能无法检测到此类漏洞。
随着计算机上安装的许多闭源程序的激增，不同的操作系统采取哪些措施来解决沙盒第三方程序的问题？
是否有任何操作系统从头开始设计时就考虑到了安全性，其中每个程序或可执行文件都必须以用户清晰可读的格式声明其运行所需的资源，以便操作系统在沙箱中运行它只能访问那些资源？例如，可执行文件必须声明它需要访问文件系统上的某个目录或文件、必须通过网络到达某些域或 IP 地址、需要一定量的内存等...如果可执行文件位于其对系统资源需求的声明中，则应阻止操作系统访问它们。
On most operating systems today, the default is that when we install a program, it is given access to many resources that it may not need, and it's user may not intend to give it access to. For example, when one installs a closed source program, in principle there is nothing to stop it from reading the private keys in ~/.ssh and send them to a malicious third party over the internet, and unless the user is a security expert proficient in using tracing programs, he will likely not be able to detect such a breach.
With the proliferation of many closed sourced programs being installed on computers, what actions are different operating systems taking to solve the problem of sandboxing third party programs?
Are there any operating system designed from the grounds up with security in mind, where every program or executable has to declare in a clearly readable format by the user what resources it requires to run, so that the OS runs it in a sandbox where it has access only to those resources? For example, an executable will have to declare that it will require access to a certain directory or a file on the filesystem, that it will have to reach certain domains or IP address over the network, that it will require certain amount of memory, etc ... If the executable lies in its declaration for system resource requirements, it should be prevented from accessing them by the operating system.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
这就是虚拟化的美妙之处。任何执行测试或操作有问题的应用程序的人都应该明智地使用虚拟机。
虚拟机：
通过 VirtualBox 等虚拟化程序提供的无缝模式，您可以以近乎无缝的方式利用虚拟机的沙箱。
This is a the beauty of Virtualization. Anyone performing testing or operating a questionable application would be wise to use a virtual machine.
Virtual Machines:
With the seamless modes virtualization programs such as VirtualBox provide you can take advantage of Virtual Machine's sandboxing in a nearly seamless fashion.
您刚刚在上一段中描述了 MAC（强制访问控制）。
You have just described MAC (Mandatory Access Control) in your last paragraph.
我也一直对此感到好奇。
如今，像 Android 这样的移动操作系统确实内置了沙箱。安装应用程序时，它会请求访问一组资源/功能的权限。据我所知，Windows 也是如此，至少在某种程度上是这样。但它更加宽容。
讽刺的是，linux等对于“基于软件的权限”似乎还很遥远，还停留在过去，很可惜。 ...至少据我所知。我很高兴有人向我展示错误并向我展示一个“可用”的开源系统，其中内置了应用程序沙箱/权限。目前，据我所知，权限完全基于用户。
我认为，这种认识已经缺失了几十年，即不仅用户需要访问文档的权限，而且可执行文件也需要访问资源的权限。它可能避免了本世纪的病毒瘟疫和安全问题。
I was always curious about that too.
Nowadays mobile OSes like Android do have sandboxing built-in. When installing an app, it asks for permissions to access a set of resources/features. Windows too as far as I know, at least to some extend. It is more permissive though.
Ironically, linux and others seem to be far far away concerning "software based permissions" and are stuck in the past, which is a pity. ...at least, as far as I know. I would be pleased for someone to show me wrong and show me a "usable" open source system where application sandboxing/privileges is built-in. Currently, as far as I know, permissions are solely user based.
I think this awareness that not only users need rights to access documents but also executables need rights to access resources has been missing for several decades. It might have avoided a plague of viruses and security issues of our century.