Post #3782440
2026-07-13 10:06 UTC
What about firejail vs a separate limited user account?
Replies (1)
-
@borax7385@lemmy.world 2026-07-13 10:16
I’m not familiar with firejail, sorry. I guess that firejail (or regular containers with podman) can be ok for CLI tools which only need access to very specific paths, if any. But for graphical applications like games you probably have to grant a lot of access. Using a separate user is simpler and it’s guaranteed that the software can only write to the home dir of the user (and other temp paths like /tmp that you don’t care). In case of problems, just wipe the home dir and you are good.