3 ms·
> Is there any way to prevent it? Firejail[0] allows cobbling together various linux sandboxing features, including namespaces which should result in an isolat
by the8472 5y ago
> Is there any way to prevent it?
Firejail[0] allows cobbling together various linux sandboxing features, including namespaces which should result in an isolated proc filesystem which doesn't see the other processes. But I don't know if the default profile for zoom does that, you have to test it or write your own.
[0] https://github.com/netblue30/firejail https://github.com/netblue30/firejail
- als0 5y agoJust checked the default profile and it looks sufficiently isolated
- guerrilla 5y agoSELinux being another. Smack too, if people still use that.
- kamray23 5y agoAUR has a package for "zoom-firejail" which ships zoom binaries with a ready-made configuration and .desktop for launching it in firejail. Goes to show how little people trust Zoom.