firejail

[gfp]

Hi Guix,

1.
does anybody use firejail?
what experiences do you have?



2.
is it worth to use? what alternatives do we have?




3.
How can I set it up?


thanks

Gottfried

Firejail is a SUID sandbox program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces, seccomp-bpf and Linux capabilities. The software includes sandbox profiles for a number of common Linux programs. Firejail should be added to the list of setuid programs in the system configuration to work properly.

OpenPGP_0xD9E413C6C4BB32CE.asc
Description: OpenPGP public key

OpenPGP_signature.asc
Description: OpenPGP digital signature