# State of Sandboxing in Linux

**URL:** https://discuss.privacyguides.net/t/state-of-sandboxing-in-linux/18451
**Category:** General
**Created:** 2024-05-22T13:55:54Z
**Posts:** 9

## Post 1 by @jerm — 2024-05-22T13:55:54Z

> This is a series of experiments with the intention of discovering the current state of user-space sandboxing on [Linux](https://en.wikipedia.org/wiki/Linux) featuring two prime examples of sandbox: [Gentoo’s sandbox](https://wiki.gentoo.org/wiki/Sandbox_(Portage)) and [Exherbo’s sydbox](https://lib.rs/crates/syd).

> **[~alip/syd (main): doc/toctou-or-gtfo.md - sourcehut git](https://git.sr.ht/~alip/syd/tree/main/item/doc/toctou-or-gtfo.md)**

---

## Post 2 by @purplecactus — 2024-05-23T01:45:17Z

thanks for sharing. will give this a read!

---

## Post 3 by @jerm — 2024-09-08T09:55:07Z

> **[GNU/Linux Sandboxing - A Brief Review](https://hardenedlinux.org/blog/2024-08-20-gnu/linux-sandboxing-a-brief-review)**
>
> This paper is an incomplete review of the sandbox solutions on the GNU/Linux operating system, which covers the often-used or commonly studied solutions. It also introduces the interfaces to be restricted by an application sandbox and discusses the...

---

## Post 4 by @anon48875053 — 2024-09-08T10:37:45Z

State of sandboxing on Linux in a nutshell: it’s a joke, use PWAs and do as many things as possible in a good browser such as Mullvad, Brave, or FF with arkenfox.

---

## Post 5 by @crossroads — 2024-09-08T17:34:17Z

That might be an issue if you need programs which are not online-first, cloud based, etc. Why would I use PWA/browser for text editor (kate, vim?, LO writer ), calcualtor (kcalc, qalculate, LO calc), photos & drawing (gimp, inkscape, qcad), audio & video playing & editing (clementine, vlc, handbrake, obs…) and so on.

Yes, sandboxing is a good thing, but it doesn’t mean our compters are compromised without it.

---

## Post 6 by @asanyan — 2024-09-08T18:12:45Z

> [@anon48875053](#):
>
> State of sandboxing on Linux in a nutshell: it’s a joke,

Now that’s FUD. The article in the OP wasn’t even discussing mainstream sandboxing solutions used to sandbox desktop apps.

---

## Post 7 by @anon48875053 — 2024-09-08T18:24:58Z

> [@asanyan](#):
>
> Now that’s FUD.

How is it FUD?

---

## Post 8 by @Ari_Yaro — 2024-09-09T16:07:31Z

Compared to Windows, it’s at least somewhat better. Windows Sandbox is simply an impractical equivalent of a VM with amnesia, barely usable for anything other than portable versions of programs. And UWP has effectively been cauterized and retired quietly.

Linux sandboxing has problems, no doubt, but to dismiss it entirely is in itself a problematic attitude - much of the fault also lies with an insecure desktop security ecosystem, and the other major desktop OS doesn’t fare any better.

---

## Post 9 by @jerm — 2025-02-05T20:38:15Z

> **[FOSDEM 2025 - Syd: An Introduction to Secure Application Sandboxing for Linux](https://fosdem.org/2025/schedule/event/fosdem-2025-4176-syd-an-introduction-to-secure-application-sandboxing-for-linux/)**