4 ms·
Because if I don't run in a jail, every software I run has full read/write access to all my files. Almost none of the software I run needs even read access to a
by vegai_ 5y ago
Because if I don't run in a jail, every software I run has full read/write access to all my files. Almost none of the software I run needs even read access to anything except its own files.
- nix23 5y agoJail is not a Sandbox but OS-Virtualization, those are two different things, Capsicum is the sandbox for FreeBSD...like secomp is for Linux.