News for hackers. Stuff that matters.

A comment on Firejail now supports X11 sandboxing. Parent comment

Re:Firejail now supports X11 sandboxing by MajesticHobo on Monday May 02, 2016 @10:24AM (#11611587)
Okay. So it's a protection against browser exploits, not overreaching web APIs.
[ Parent | on HN ]
Re:Firejail now supports X11 sandboxing by koolba on Monday May 02, 2016 @10:55AM (#11611831)
Good security has layers. That way if one falls through, hopefully the next layer will catch it.
[ Parent | on HN ]
Re:Firejail now supports X11 sandboxing by cm3 on Monday May 02, 2016 @04:52PM (#11615491)
It's more a boundary for the browser not to pass because it has no business. I've seen an alternative approach which used a separate user account for Firefox and then SSH forwarding of X.
[ Parent | on HN ]