Re: firefox sandboxing

2018-05-16 Thread Jason Thorpe
> On May 14, 2018, at 6:38 AM, Thomas Klausner wrote: > > We already support chroot(2). Are user namespaces > (http://man7.org/linux/man-pages/man7/user_namespaces.7.html - looks > like capabilities) something that would be good to have for NetBSD? IMO, chroot(2) is a pretty poor way to do sa

Re: firefox sandboxing

2018-05-16 Thread Rhialto
On Mon 14 May 2018 at 15:38:09 +0200, Thomas Klausner wrote: > We already support chroot(2). Are user namespaces > (http://man7.org/linux/man-pages/man7/user_namespaces.7.html - looks > like capabilities) something that would be good to have for NetBSD? It might help to get a NetBSD version of Doc

firefox sandboxing

2018-05-14 Thread Thomas Klausner
Hi! Here's an interesting article about firefox sandboxing improvements on Linux: https://www.morbo.org/2018/05/linux-sandboxing-improvements-in_10.html We already support chroot(2). Are user namespaces (http://man7.org/linux/man-pages/man7/user_namespaces.7.html - looks like capabil