David Mirza Ahmad

Electrum when launched by Oz does not have the right window background color. To reproduce: Start electrum the normal way. Interestingly: oz launch -n electrum [wait a few seconds] electrum...

because this supercedes them all: https://github.com/subgraph/subgraph-debian-packages/blob/master/README.md

/etc/dbus-1/system.d/com.subgraph.Firewall.conf: ``` ``` Ideally should not be so permissive.

Allow mount into sandbox of e.g. /tmp/blah, but ask user to confirm with GUI dialog. No dialog for standard Oz bind mounts.

This might be an interesting feature to add. The biggest challenge is DNS if we want transparent outbound TCP connectivity with something like metaproxy in the sandbox. Cleanest option is...

When oz-seccomp-trainer generates a candidate seccomp-bpf policy, the order of the system calls in the seccomp-bpf checks compiled into bytecode is based on observed invocation frequency. This improved performance noticeably...

Current procsnitch lookup works, but subject to losing information about short lived connections. * The socket inode #s should be saved when oz TCP port forward clients connect, and removed...