• Synapse@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    8 months ago

    Sorry, but it’s also beyond my understanding. As far as I can understand, run0 doesn’t use a sandbox, but will better isolate the privileged processes from unprivileged ones when executing a command.