3 ms·
This is already possible in Linux with mount namespaces, and used by (for example) systemd to block access to /home by services if so configured by the user.
by umanwizard 7y ago
This is already possible in Linux with mount namespaces, and used by (for example) systemd to block access to /home by services if so configured by the user.
- GordonS 7y agoI wonder if there is a Linux distro out there that works like the OP wanted out-of-the-box, with userland processes sandboxes by default, and providing a slick interface to grant access to areas of the filesystem when wanted? There are so many distros with little differentiation - I'd think something like this would be quite unique (unless it already exists, and I don't know it!)
- filipMar 7y agoDo you mean something like Fedora silverblue?
- olejorgenb 7y agohttps://github.com/netblue30/firejail https://github.com/netblue30/firejail