Hacker Read

viraptor | karma 41139 | avg karma 2.79 · 2016-02-07 08:40:22+00:00

I didn't know something like that exists. I knew of win10 app sandboxes, but this is even more generic. I'll definitely use it whenever possible.

I got so used to this being relatively easy on linux (grsec, firejail, seccomp, etc.), but never heard of easy ways to apply it on win.

frik | karma 5234 | avg karma 1.61 · 2016-02-07 09:52:20

> relatively easy on linux

Please give me an example how to launch a program in a sandbox incl virtual FS on Linux - with Sandboxie it takes a single mouse click

cyphar | karma 11934 | avg karma 2.62 · 2016-02-07 11:08:59+00:00

Docker would be the closest "one click" thing that exists. You could make it more secure but it would require more configuration.

guipsp | karma 737 | avg karma 2.16 · 2016-02-07 11:18:23+00:00

firejail

viraptor | karma 41139 | avg karma 2.79 · 2016-02-07 11:48:05+00:00

chroot / firejail / lxc / ...

But usually I just prefer to run apps without a sandbox, and ensure they can't touch anything important (new role + apparmor/selinux/grsec).

exprx | karma 10 | avg karma 0.56 · 2016-02-07 12:39:14+00:00

    sandbox command