4 ms·

> I like Android's system of per-app uid/gid. But AFAIK it's not implemented by any mainstream Linux kernel or distro. You can create users manually for each a

> I like Android's system of per-app uid/gid. But AFAIK it's not implemented by any mainstream Linux kernel or distro. You can create users manually for each app. For GUI apps, https://firejail.wordpress.com/ https://firejail.wordpress.com/

lovelearning 4y ago
A once-over of the docs seemed to tick a lot of my boxes. I'll check it out, thanks!
planede 4y ago
firejail is not limited to GUI apps, is it?
- progval 4y ago
  It's not, but there is a 2-3s startup and shutdown delay, which I find too annoying for CLIs
  - planede 4y ago
    I guess you can limit entire shell sessions with firejail, to amortize the startup time. But I suppose the limits would need to be looser in that case to be useful.