3 ms·

At Wikimedia, we are using firejail to lock down services. We encountered some bugs in older versions, but those have since been fixed. Overall, it has been wor

by gwicke 10y ago

At Wikimedia, we are using firejail to lock down services. We encountered some bugs in older versions, but those have since been fixed. Overall, it has been working fairly well for us.

Scaevolus 10y ago
What made you choose Firejail over alternatives like Docker?
- danieldk 10y ago
  Or maybe even more appropriate: AppArmor (or SELinux).
  - dingaling 10y ago
    Firejail can be invoked and configured by normal unprivileged users. Apparmor requires root for creating and installing new profiles.
  - feld 10y ago
    The new tools are being invented because the old tools suck. SELinux is terrible from a UX standpoint
- mynewtb 10y ago
  Docker is not for secure sandboxing, afaik you can easily escape and get root.