Create SEAlice SIP

[alicerunsonfedora]

From @sr229 on Discord:

I'm deprecating GOBFADU entirely tho
For example MISSING_GOBFADU_COMPONENT is replaced with SE_MODULE_NFOUND
SIP checking goes in actuality by comparing the files against official ones via md5 hashes
SIP only happens once at first time and is async
All boot ops are required to be threaded and none would block boot or fail startup unless its > an SE_ILLEGAL_FILE error or SE_PROFILE_NVALID
ie:
SE_ILLEGAL_FILE (game.rpyc does not match official)
all releases will now include a md5sums.txt file which will include all needed hashes
and the really controversial part
SE_ILLEGAL_CALL
SEAlice will enforce system call restrictions that has a security implication

[alicerunsonfedora]

#12 will be closed and this one will remain open.

[alicerunsonfedora]

Due to the unfortunate circumstances with issues regarding MAS's recent updates with jumpscares and killing off explorer.exe, we should update our policy to prevent execution of apps that extend outside of AliceOS and tamper with the host operating system without user permissions:

Just please don't do things like mess with people's files or interfere with their enjoyment of their machine. With DDLC, special care was made to ensure that even in the scariest parts of the game, the player could always make the decision to stop playing if they either felt that they were not safe, or if they were emotionally uncomfortable with what the game's themes were developing into. We request that mods respect this and uphold the ability for players to choose not to continue to participate.

- Mithost from DDMC #community channel

If needed, we could add a new permission in the Applet class that grants access to "communicating" with the host operating system, though most work should be done within AliceOS itself.

[sr229]

This was already planned from the start @alicerunsonfedora, the reason why we inherited the Snap isolation mechanism for SE

[alicerunsonfedora]

Ah, I forgot about that! Well, I guess we can consider the MAS incident a friendly reminder as to why we need SEAlice.