undefined | Better HN

0 pointskazen444y ago0 comments

what should run in a jail? you need the base system to run jails. and that is pretty much the only thing that is installed.

0 comments

2 comments · 1 top-level

vegai_4y ago· 1 in thread

Because if I don't run in a jail, every software I run has full read/write access to all my files. Almost none of the software I run needs even read access to anything except its own files.

nix234y ago

Jail is not a Sandbox but OS-Virtualization, those are two different things, Capsicum is the sandbox for FreeBSD...like secomp is for Linux.

j / k navigate · click thread line to collapse