3 ms·
I use Docker for this. Sandbox is not effective. Like if you run Firefox with "deny network" profile you will still be able to browse as usual.
by throwaway290 1y ago
I use Docker for this. Sandbox is not effective. Like if you run Firefox with "deny network" profile you will still be able to browse as usual.
- jbverschoor 1y agosame.. I use https://github.com/jrz/container-shell https://github.com/jrz/container-shell to start a fresh debian+tools image under the current directory, yet still allows me to easily open multiple terminals to the same instance. shell my:sandbox I also use sandbox-exec with limitations to the pwd, depending on what I want to exec.