3 ms·

Most daemons are sandboxed by Debian (or upstream) already. For applications, Debian ships firejail.

• zozbot234 5y ago
  AppArmor also allows for some sandboxing, and is enabled by default in Debian stable.
  • goodpoint 5y ago
    AppArmor does very little compared to modern sandboxes.