zlacker

>>RafelM+(OP)
Honestly It's not a "reasonably secure OS" but an "absurd OS", absurd because for safety we have since few decades a very lightweight and very effective solutions: Plan 9 namespaces.

Actual older than Plan 9 but still alive OSes have done limited and limiting choices but many have something "somewhat equivalent", for instance GNU/Linux cgroups (see FireJail, BubbleWrap etc) or FreeBSD Capsicum. Choosing anything heavyweight is a nonsense.

>>kkfx+Nl
Plan 9 was so far ahead of its time we still haven't caught up.