> Such sandboxes would only work well, if the whole OS would be built around supporting them. This. Which is why I'm using Qubes OS designed around sandboxing,

> Such sandboxes would only work well, if the whole OS would be built around supporting them. This. Which is why I'm using Qubes OS designed around sandboxing, and I can't recommend it enough.