rusty-snake

Sorry I don't get your question. What I found out yet by testing in my Nightly - containers always isolate cookies, exceptions do not stop this (tested by changeing theme...

First changelog by @fxbrit :tada: :1st_place_medal:

> what more bring TCP and dfpi to you - dFPI nothing much. - TCP is more that strict cookie isolation (or whatever the current marketing name for it is)....

Can't say it better than @illdeletethis

`mount(2)`: > **EMFILE** (In case no block device is required:) Table of dummy devices is full. --- > I tried to increase the corresponding operating system limit How? Which limit?

> Is this the intended behaviour? I think so, because that's how prdeadsig and pid namespaces work. > If so, should something be added to the documentation under --die-with-parent? The...

FYI: https://codeberg.org/crabjail/crabjail/src/commit/6d4e5076c74e7e29afe377b296ff723291d9344f/src/crabjail.rs#L698 I did not looked at the architecture of bubblejail in depth yet but a simple slirp4netns integration is rather simple I guess. ```console term1$ bwrap --dev-bind / /...

Actually you will use the PID reported by `--json-status-fd`. Using a process inside the sandbox is a lot extra work and `--unshare-pid` destroy everything (and `--dev` too as it looks...

I think Signal's photo editing is the best way to edit photos ATM if you want OSS. Somebody could make an standalone app for it.

Firejail 0.9.64.2 has now a profile for CoyIM.