4 ms·
How? Usually that would require a layer of virtualization that checks all syscalls to filter out the naughty ones.
by jhardy54 6y ago
How? Usually that would require a layer of virtualization that checks all syscalls to filter out the naughty ones.
- eikenberry 6y agoThey have a sections discussing the technology in their docs. https://firejail.wordpress.com/documentation-2/basic-usage/#tech https://firejail.wordpress.com/documentation-2/basic-usage/#... https://firejail.wordpress.com/documentation-2/seccomp-guide/ https://firejail.wordpress.com/documentation-2/seccomp-guide...
- yonixw 6y agotl;dr Linux has some kernel features that can be combined to be used as a sandbox. On windows, in contrast, you would have to use a virtualization layer or sys-call interceptor.
- diegocg 6y agoSeccomp does that. No need for a visualisation layer.