4 ms·
Is there a performance decrease when running apps in firejail? I see a mention of x11 support here[0], but how is Wayland support? [0] https://firejail.wordpr
by Naac 6y ago
Is there a performance decrease when running apps in firejail?
I see a mention of x11 support here[0], but how is Wayland support?
[0] https://firejail.wordpress.com/documentation-2/x11-guide/ https://firejail.wordpress.com/documentation-2/x11-guide/
- als0 6y agoThere isn't a performance decrease. Apps run as an ordinary process but with extra restrictions about what they can access.
- jhardy54 6y agoHow? Usually that would require a layer of virtualization that checks all syscalls to filter out the naughty ones.
- eikenberry 6y agoThey have a sections discussing the technology in their docs. https://firejail.wordpress.com/documentation-2/basic-usage/#tech https://firejail.wordpress.com/documentation-2/basic-usage/#... https://firejail.wordpress.com/documentation-2/seccomp-guide/ https://firejail.wordpress.com/documentation-2/seccomp-guide...
- yonixw 6y agotl;dr Linux has some kernel features that can be combined to be used as a sandbox. On windows, in contrast, you would have to use a virtualization layer or sys-call interceptor.
- diegocg 6y agoSeccomp does that. No need for a visualisation layer.