Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Boxxy puts bad Linux applications in a box with only their files. Parent comment
Firejail if you want ease of use (there are a lot of ready profiles to be used).
Bubblewrap if you want more security, at the cost of having to do more manual work.
TL;DR Firejail is a blacklist of things, while bubblewrap is an whitelist, so bwrap policies tend to be tighter.
Firejail if you want ease of use (there are a lot of ready profiles to be used).
Bubblewrap if you want more security, at the cost of having to do more manual work.
TL;DR Firejail is a blacklist of things, while bubblewrap is an whitelist, so bwrap policies tend to be tighter.