Post #3314552
2026-06-14 06:25 UTC
I don't think flatseal isolates child processes, only the flatpak itself.
You could use firejail. That is available outside the AUR. As there is no socket available, if testing with a browser it should force the browser to crash.
You could also try setting up a network namespace that only binds to loopback in case you want local device network access.
Replies (1)
-
@sudoer777@lemmy.ml 2026-06-15 17:32
Why not use Nixpak? (which doesn’t require SUID binaries)