Linux application sandboxing - old tech for the future
Summary
The article revisits Linux sandboxing using Firejail and Xpra, arguing that older tools still provide strong isolation and can be simpler than modern container formats. It offers practical, step-by-step examples and discusses security vs usability considerations in X11 environments, ending with guidance on combining tools for robust containment.