GrapheneOS-style sand-boxing for every app is long overdue in Linux. I'd love to have it's granular permissions for every single service. I'd love to have the battery management, the unified settings UI, the effortless disk encryption UX and key management.
Could you build it with SE Linux and a lot of glue? Yes, but nobody has. And doing it well, everywhere, would take a lot of hours.
GrapheneOS-style sand-boxing for every app is long overdue in Linux. I'd love to have it's granular permissions for every single service. I'd love to have the battery management, the unified settings UI, the effortless disk encryption UX and key management.
Could you build it with SE Linux and a lot of glue? Yes, but nobody has. And doing it well, everywhere, would take a lot of hours.