{"action":"created","issue":{"url":"https://api.github.com/repos/subgraph/oz/issues/3","labels_url":"https://api.github.com/repos/subgraph/oz/issues/3/labels{/name}","comments_url":"https://api.github.com/repos/subgraph/oz/issues/3/comments","events_url":"https://api.github.com/repos/subgraph/oz/issues/3/events","html_url":"https://github.com/subgraph/oz/issues/3","id":92486536,"number":3,"title":"Not really an issue, but do you guys know about subuser?","user":{"login":"timthelion","id":1391608,"avatar_url":"https://avatars.githubusercontent.com/u/1391608?v=3","gravatar_id":"","url":"https://api.github.com/users/timthelion","html_url":"https://github.com/timthelion","followers_url":"https://api.github.com/users/timthelion/followers","following_url":"https://api.github.com/users/timthelion/following{/other_user}","gists_url":"https://api.github.com/users/timthelion/gists{/gist_id}","starred_url":"https://api.github.com/users/timthelion/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/timthelion/subscriptions","organizations_url":"https://api.github.com/users/timthelion/orgs","repos_url":"https://api.github.com/users/timthelion/repos","events_url":"https://api.github.com/users/timthelion/events{/privacy}","received_events_url":"https://api.github.com/users/timthelion/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-07-01T21:13:47Z","updated_at":"2015-07-01T21:45:34Z","closed_at":null,"body":"It seems like your profiles are the same as subuser permissions.json files. Everything feels very similar...\r\n\r\nhttp://subuser.org"},"comment":{"url":"https://api.github.com/repos/subgraph/oz/issues/comments/117833244","html_url":"https://github.com/subgraph/oz/issues/3#issuecomment-117833244","issue_url":"https://api.github.com/repos/subgraph/oz/issues/3","id":117833244,"user":{"login":"timthelion","id":1391608,"avatar_url":"https://avatars.githubusercontent.com/u/1391608?v=3","gravatar_id":"","url":"https://api.github.com/users/timthelion","html_url":"https://github.com/timthelion","followers_url":"https://api.github.com/users/timthelion/followers","following_url":"https://api.github.com/users/timthelion/following{/other_user}","gists_url":"https://api.github.com/users/timthelion/gists{/gist_id}","starred_url":"https://api.github.com/users/timthelion/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/timthelion/subscriptions","organizations_url":"https://api.github.com/users/timthelion/orgs","repos_url":"https://api.github.com/users/timthelion/repos","events_url":"https://api.github.com/users/timthelion/events{/privacy}","received_events_url":"https://api.github.com/users/timthelion/received_events","type":"User","site_admin":false},"created_at":"2015-07-01T21:45:34Z","updated_at":"2015-07-01T21:45:34Z","body":"OK, so I'll try to make a quick comarison of subuser and oz:\r\n\r\nYou have beat me to xpra support. I really want to get that right, and it has taken me some time. Right now, subuser is just doing the entirely insecure: it shares an X11 server with the host. You can see this issue https://github.com/subuser-security/subuser/issues/31 to understand why this is such a hard problem for me.\r\n\r\nWhere oz has profiles, subuser has [permissions](http://subuser.org/subuser-standard/permissions-dot-json-file-format.html) In this the two projects are *very* similar. Basically, we both store permissions for a given application in a single JSON file.\r\n\r\nSubuser makes a very important (in my mind) distinction between applications and use-cases. For example, there is one docker image on my machine which installs firefox, but I have 4 firefox subusers: internet-banking, google-calendar, offline-test-browser, normal-browser. This allows me to confine these use cases to separate containers, as well as give each it's own specific set of permissions. Each of my \"firefox\" subusers has it's own home directory, and literally does not know that the other versions of firefox exist. I don't know if it is possible in oz to do this yet (it is not clear from my quickly glancing through your readme). Can I install the \"evince\" profile twice, with sepparate permissions, perhaps for work mail and personal mail?\r\n\r\nYou may want to have a look at the other similar projects out there, which I have listed here: http://subuser.org/related-projects.html\r\n\r\nThe one project that is most seriously close to oz/subuser is https://wiki.gnome.org/Projects/SandboxedApps . Gnome's approach to sandboxed apps is similar to that of java web start. If the app wants to do something, like access the webcam, it calls a dbus method, and the user sees a dialog and the user can then confirm or deny the request. I think that the oz/subuser approach to having a single central permissions file is fundamentally superior. It is much more transparent. I also think that constantly prompting the user with security dialogs makes the user feel less secure, which means that the user will be more likely to stop using sandboxed apps and go back to using completely unsecure normal apps :P .\r\n\r\nThe other thing that I ask myself often, is if with subuser I am not re-inventing Android. Afterall, Android also contains applications and has a central permissions list. The key difference that I see between subuser and Android, is that subuser permissions are much more fine grained and CAN BE EDITED BY THE USER! I think that we can at least learn from Android's mistakes. I think that the \"Read/Write SD Card\" permission was a major mistake in Android. I know that google wanted to make things simple, but by doing so, they made it so that every app that actually edits files on the system in a sane way has basically full access to everything, which is just plain missing the point of containment.\r\n\r\nRegards,\r\n\r\nTimothy Hobbs"}}