refi64/zypak

Use sub-sandboxing

rugk opened this issue ยท 1 comments

rugk commented

Flatpak recently got a lot of improvements for sub-sandboxing: https://github.com/flatpak/flatpak/releases/tag/1.12.0

Does this tool here already map e.g. Chromium's sandboxes into flatpak sub-sandboxes? If not, maybe that could be added. ๐Ÿ™‚

AFAIK the sub-sandbox functionality added is mostly around spawning the sandboxes with a custom rootfs and some other shared resources, which isn't really something applicable to our use case.