Unfortunately Linux had quite a few kernel level local privilege escalation issues recently. The sandboxes use the same kernel as the host. However, still better to have a sandbox.
Also webbrowsers a use sandboxing for ages and split privileges between multiple processes but can still have critical security issues.
Even full blown VMs sometimes have issues that allow escape to the hypervisor.
I still really like sandboxing and I’m not a huge fan of antivirus solutions, just saying it’s not a magic bullet.
![Free Anti-Virus Software [System32Comics]](https://lemmy.zip/pictrs/image/9fbff133-7885-48d6-820f-79d05b5696a6.avif){kind=link}
Unfortunately Linux had quite a few kernel level local privilege escalation issues recently. The sandboxes use the same kernel as the host. However, still better to have a sandbox.
Also webbrowsers a use sandboxing for ages and split privileges between multiple processes but can still have critical security issues.
Even full blown VMs sometimes have issues that allow escape to the hypervisor.
I still really like sandboxing and I’m not a huge fan of antivirus solutions, just saying it’s not a magic bullet.
I did only say that I thought sandboxing was “a big part of the solution.”