3 ms·
You should ALWAYS run your agent as separate, unprivileged, UNIX user, never in your main account. If you absolutely need to run it as your own user, you shoul
by drnick1 3mo ago
You should ALWAYS run your agent as separate, unprivileged, UNIX user, never in your main account.
If you absolutely need to run it as your own user, you should bubblewrap it. I do this for things like Steam, games, or other "blackbox" closed source programs that cannot be reasonably trusted.
- drnick1 3mo agoYou should also check that mountpoints like external disks and network resources aren't publicly accessible to other users than your own.