I’m using Firejail as an additional layer of defense on some machines. It’s not a silver bullet, and I get the feeling that the jails for Firefox/Chromium are

I’m using Firejail as an additional layer of defense on some machines. It’s not a silver bullet, and I get the feeling that the jails for Firefox/Chromium are not terribly constraining. I also don’t think there’s a good way to poke holes for things like libnotify or links in browsers that go to native applications. This is a shame; I’d love the ability to have a link from Firefox under Firejail to poke out and run in Zoom or Slack under their respective sandboxes, or just to get native notification boxes. Still, I think practically it does a lot to limit the blast radius of potential attacks, especially if you don’t expect to be explicitly targeted.