Post #3046867

Is the current state of the art for application sandboxing on Linux still bubblewrap, or are there other options out there that aren't at the entire-OS level like Qubes? (I know Spectrum [thanks @qyliss!], but afaik it's still under very heavy development and meant to stand on its own at the OS layer.) #linux #security