There used to be one called Subgraph, but the project is dead, I think. Hope someone will pick it back up, because there’s certainly people who’d prefer to sacrifice the security benefits for performance, while keeping the isolation/networking parts of it.
4 Comments
futz@infosec.pub · 4 pts · 3y
Would be interesting to see a variation that leverages containers vice virtual machines.
bender@infosec.pub · 4 pts · 3y
There used to be one called Subgraph, but the project is dead, I think. Hope someone will pick it back up, because there’s certainly people who’d prefer to sacrifice the security benefits for performance, while keeping the isolation/networking parts of it.
Qubes, for their part, is pretty clear this won’t happen, but that seems pretty reasonable given their project goals.
cooopsspace@infosec.pub · 1 pts · 2y
Probably pretty bad isolation in containers though.