3 ms·
Can you recommend any distros that use it extensively, or is it too early?
by noja 9y ago
Can you recommend any distros that use it extensively, or is it too early?
- eeZah7Ux 9y agoIdeally upstreams, rather than distributions, should sandbox their own projects. However, Debian is shipping a number of hardened systemd unit files. To see some examples on how the sandboxing is being set up you can grep for SystemCallFilter, CapabilityBoundingSet, ProtectSystem, ProtectHome in /lib/systemd/system/*.service