4 ms·
$ bwrap --unshare-net --dev-bind / / bash $ curl google.com curl: (6) Could not resolve host: google.com Or you could use firejail, or do it manually with
by 5e92cb50239222b 3y ago
$ bwrap --unshare-net --dev-bind / / bash
$ curl google.com
curl: (6) Could not resolve host: google.com
Or you could use firejail, or do it manually with `unshare`, or with any of the container runtimes (docker, podman).
https://wiki.archlinux.org/title/Bubblewrap https://wiki.archlinux.org/title/Bubblewrap
https://wiki.archlinux.org/title/Firejail https://wiki.archlinux.org/title/Firejail
- matusfaro 3y agoInteresting options, wasn't aware of those. The only minor counter-argument would be laziness as a security threat: the more difficult you make the process, the more likely the user will skip seemingly useless steps, thus compromising security.