Hacker News new | ask | show | jobs
by microtonal 3606 days ago
Or maybe even more appropriate: AppArmor (or SELinux).
2 comments

Firejail can be invoked and configured by normal unprivileged users. Apparmor requires root for creating and installing new profiles.
The new tools are being invented because the old tools suck.

SELinux is terrible from a UX standpoint