4 ms·
You can (kind of) sandbox Firefox with X11 today. Just run it as untrusted X11 client with privileges of untrusted uid. Downsides: * this does not always work
by posix_me_less 7y ago
You can (kind of) sandbox Firefox with X11 today. Just run it as untrusted X11 client with privileges of untrusted uid. Downsides:
* this does not always work for other programs, and for Firefox you need to turn off bell events in about:config to avoid random crashes;
* (this may be upside depending on what your expectations are) X clipboard is still shared in the host->client direction.