Re:Raru: Run as random user
by geofft on Friday January 15, 2016 @10:27PM
(#10914086)
CLONE_NEWUSER / user namespaces is Linux-specific, yes. (Though see my other comment.)
I believe the Chromium sandbox mostly applies to things like renderers, where you can just hand it a buffer and a bunch of inputs and it'll effectively contain things like HTML parser bugs or libpng buffer overflows. I'm not totally sure if browsing itself is sandboxed.
I believe the Chromium sandbox mostly applies to things like renderers, where you can just hand it a buffer and a bunch of inputs and it'll effectively contain things like HTML parser bugs or libpng buffer overflows. I'm not totally sure if browsing itself is sandboxed.