> And for the sandboxing it uses SELinux which is available on desktop as well I used to think that, and then I started using Fedora. They have put a lot of ef

> And for the sandboxing it uses SELinux which is available on desktop as well I used to think that, and then I started using Fedora. They have put a lot of effort into their SeLinux policies. I do all sorts of things with my workstation and very rarely have to care. In the last 6 months the only thing I have had to do is add ":z" to a bind mount running a podman container so that labelling happened correctly.