4 ms·
bubblewrap is actually worse - there are known escapes in there that haven't been fixed for years
by eyberg 1y ago
bubblewrap is actually worse - there are known escapes in there that haven't been fixed for years
- quotemstr 1y agoWait. What? What escapes? Is it that bubblewrap not faithfully implement the policy you give it or that there are surprising gaps in the kernel's namespace isolation?
- deleted 1y ago[deleted]
- udev4096 1y agoIt is the most widely used sandbox layer for pretty much everything. What escapes are you talking about? Are we supposed to take your word for it? Come on