Hacker News new | ask | show | jobs
by gidellav 29 days ago
This is actually a topic of current interest, and I think that I will switch to a sandbox-by-default once the bwrap implementation inside of zerostack is well tested and highly configurable.