Then you should look at Qubes-OS where everything is "contained" and/or VM
partitioned by hardware IOMMU. You can allocate one VM where only mono Apps are
allowed to run, but they can still share the same desktop UI. Cutting and
pasting across VM security domains requires an extra step, but so would it
VMware.
Even hardware privileged level code can not scribble over your
kernel memory, so MONO would have no chance to escape and pollute the other apps
on your system if you set it up properly. Try it only if you have the real
burning desire for hard-core hardware supported OS security. It just came out of
Beta so you still need to know your way around the system architecture via
command line to get some things done. But it's looking real good.
--- The Investors IP Law: The future health of a Corporation is
measured as the inverse of the number of IP lawsuits they are currently
litigating. [ Reply to This | Parent | # ]
|