• @thedeadwalking4242
    link
    520 days ago

    Nix apps are not sandboxed and you have no control of what resources they have access to or don’t, unless you wrap them with some other program

    • LalSalaamComrade
      link
      fedilink
      English
      2
      edit-2
      20 days ago

      They can be isolated because Nix has in-built support for three different levels of sandboxing - virtual machines, containers as well as ephemeral shells.