SkewedZeppelin

Sandboxing tools allow bypass / aren't restricted

1

fapolicyd exempts the root user, but doesn't check the uid of child processes, thereby exempting them too even if they aren't root so any programs running with bwrap or firejail...