4 ms·
Is this a safe enough sandbox that you could execute whatever an arbitrary url sends you without malicious content being able to break your machine?
by Lerc 10y ago
Is this a safe enough sandbox that you could execute whatever an arbitrary url sends you without malicious content being able to break your machine?
- ComodoHacker 10y agoThere couldn't be any guarantee for "whatever" and "arbitrary", you know.
- Lerc 10y agoYes, but there's a difference between an exploit being the sandbox not working as intended and the sandbox being used for a purpose for which is not intended. Everything is exploitable to some extent.
- the8472 10y agoThe degree of security provided depends on the configuration passed to firejail for a particular program. If you shove something into a completely isolated tmpfs and disable most syscalls it's probably secure. If you relax the configurations then the content may be able to use ipc mechanisms to talk to things outside the sandbox or modify the filesystem in a way that will result in an exploit at some later point in time.