3 ms·
Firejail is the solution to the author's concerns. I only would suggest a whitelist based approach instead of a blacklist approach.
by snickerer 5y ago
Firejail is the solution to the author's concerns.
I only would suggest a whitelist based approach instead of a blacklist approach.
- SubzeroCarnage 5y agoA whitelist/allowlist approach doesn't work for all programs, see this discussion about it: https://github.com/netblue30/firejail/issues/2070 https://github.com/netblue30/firejail/issues/2070