• Synapse
    link
    English
    28 months ago

    Sorry, but it’s also beyond my understanding. As far as I can understand, run0 doesn’t use a sandbox, but will better isolate the privileged processes from unprivileged ones when executing a command.