you are viewing a single comment's thread
view the rest of the comments
[–] 0 points 1 week ago

Fair enough, you can do some sandboxing this way. But SELinux is not a sandboxing tool in the same way bubblewrap or landlock are. It’s a tool that can put gates around your tools until it’s a sandbox, but SELinux as sandboxing is not in the spirit of “tools doing one thing and doing it well”

  • source
  • parent