Comment by throwaway290
Comment by throwaway290 a day ago
I use Docker for this. Sandbox is not effective. Like if you run Firefox with "deny network" profile you will still be able to browse as usual.
Comment by throwaway290 a day ago
I use Docker for this. Sandbox is not effective. Like if you run Firefox with "deny network" profile you will still be able to browse as usual.
same.. I use https://github.com/jrz/container-shell to start a fresh debian+tools image under the current directory, yet still allows me to easily open multiple terminals to the same instance.
I also use sandbox-exec with limitations to the pwd, depending on what I want to exec.