Post #3831452

Just so you know Firejail is a setuid root binary with a lot of code. This means that if that code gets exploited and the sandboxed process escapes the sandbox it will have root privileges instead of the running users. Sources: github.com/netblue30/firejail, madaidans-insecurities.github.io/linux.html#firej…