2 ms·
Firefox is sandboxed via seccomp-bpf on Linux.
by pcwalton 8y ago
Firefox is sandboxed via seccomp-bpf on Linux.
- jakeogh 8y agoAwesome. I just checked, and it appears one FF process is, and one is not: https://bpaste.net/show/d8b3d6ada513 https://bpaste.net/show/d8b3d6ada513 https://wiki.mozilla.org/Security/Sandbox/Seccomp https://wiki.mozilla.org/Security/Sandbox/Seccomp I would like much more general control, like disable write, or prevent forks, or net access, right from the executing shell. I have selinux experience, and it's too low level.