bubblewrap
bubblewrap copied to clipboard
Bubblewrap vs nsjail?
Is there a reason the the (seemingly) overlapping functionality of bubblewrap to the Google nsjails project?
On Wed, Jun 29, 2016, at 02:32 AM, Nathan wrote:
Is there a reason the the (seemingly) overlapping functionality of bubblewrap to the Google nsjails project?
Offhand, it doesn't appear to me that nsjail is intended to be made setuid securely.
What about minijail? https://github.com/google/minijail
Seems to have been intended to be SUID: https://www.chromium.org/chromium-os/chromiumos-design-docs/system-hardening?tmpl=%2Fsystem%2Fapp%2Ftemplates%2Fprint%2F&showPrintDialog=1