you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 1 day ago (1 child)

Unfortunately Linux had quite a few kernel level local privilege escalation issues recently. The sandboxes use the same kernel as the host. However, still better to have a sandbox.

Also webbrowsers a use sandboxing for ages and split privileges between multiple processes but can still have critical security issues.

Even full blown VMs sometimes have issues that allow escape to the hypervisor.

I still really like sandboxing and I'm not a huge fan of antivirus solutions, just saying it's not a magic bullet.

  • source
  • parent
  • hideshow 1 child comment