3 ms·
As a bubblewrap user, beware https://github.com/containers/bubblewrap/pull/586 https://github.com/containers/bubblewrap/pull/586 still missing. The usual ^C doe
by a-french-anon 2y ago
As a bubblewrap user, beware https://github.com/containers/bubblewrap/pull/586 https://github.com/containers/bubblewrap/pull/586 still missing. The usual ^C doesn't work with your sandboxed stuff, very annoying.
A cursory look at NSjail tells me its filesystem stuff is less granular than bwrap's bind mounting.
Firejail can't handle : in some paths (at all, no escaping provided) which made me dump it.
- selendym 2y ago> Firejail can't handle : in some paths (at all, no escaping provided) which made me dump it. This doesn't match my experience. For example, the following works just fine in a profile file: blacklist /sys/devices/pci0000:00/* Can you give an example of what you had problems with?
- a-french-anon 2y agoLooks like this specific character got fixed. But still a lot of forbidden ones. cf https://github.com/netblue30/firejail/issues/4614 https://github.com/netblue30/firejail/issues/4614, https://github.com/netblue30/firejail/blob/master/src/firejail/macros.c#L268 https://github.com/netblue30/firejail/blob/master/src/fireja... and https://github.com/netblue30/firejail/blob/master/src/lib/common.c#L487 https://github.com/netblue30/firejail/blob/master/src/lib/co...