3 ms·
I dislike bwrap because it is built around a CLI-arg based approached for sandboxing. Even the wrappers that allow config-based sandboxes just end up transcribi
by timeflex 2y ago
I dislike bwrap because it is built around a CLI-arg based approached for sandboxing. Even the wrappers that allow config-based sandboxes just end up transcribing a file to CLI args. I'd prefer it actually have an API of sorts. Instead, it seems like it was never meant to be nothing more than a quick and dirty tool for basic sandboxing in a pinch.
- eikenberry 2y ago> I'd prefer it actually have an API of sorts. The CLI and its commands with parameters is an API. Additionally, IMO, it can work pretty well if done right. But opinions vary.
- timeflex 2y agoCommand line flags aren't an efficient way to pass 20+ args to a program. Sure, it works but that is why I get the feeling it was only ever designed for quick and dirty sandboxing.
- deleted 2y ago[deleted]