• SMillerNL@piefed.social
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    2
    ·
    6 days ago

    Fair enough, you can do some sandboxing this way. But SELinux is not a sandboxing tool in the same way bubblewrap or landlock are. It’s a tool that can put gates around your tools until it’s a sandbox, but SELinux as sandboxing is not in the spirit of “tools doing one thing and doing it well”