> It does not need write access outside of its sandbox. You have SElinux for that, if you like bureaucracy and filing triplicate forms to able to run scripts w

> It does not need write access outside of its sandbox. You have SElinux for that, if you like bureaucracy and filing triplicate forms to able to run scripts with side effects.