4 ms·
This looks nice, but I fail to see any use cases that cannot be handled with bwrap and mount namespaces.
by ximm 2y ago
This looks nice, but I fail to see any use cases that cannot be handled with bwrap and mount namespaces.
- amarshall 2y agoSome systems or admins may not trust unprivileged namespacing (thus disabling and its use requiring root), while Landlock may be enabled (and is specifically designed to be used by unprivileged processes).
- 1oooqooq 2y agonamespace, specially user and net, are terrible to setup and use. I'm not sure this is better, but assuming it is by the author into.