3 ms·
> If you have to use SUID I think it's no better than using the same functionality in Docker or systemd systemd: yes, but firejail comes with friendly profiles
by goodpoint 5y ago
> If you have to use SUID I think it's no better than using the same functionality in Docker or systemd
systemd: yes, but firejail comes with friendly profiles for most applications
docker: not at all, it has a much higher attack surface