Unfortunately Linux had quite a few kernel level local privilege escalation issues recently. The sandboxes use the same kernel as the host. However, still better to have a sandbox.
Also webbrowsers a use sandboxing for ages and split privileges between multiple processes but can still have critical security issues.
Even full blown VMs sometimes have issues that allow escape to the hypervisor.
I still really like sandboxing and I’m not a huge fan of antivirus solutions, just saying it’s not a magic bullet.
Unfortunately Linux had quite a few kernel level local privilege escalation issues recently. The sandboxes use the same kernel as the host. However, still better to have a sandbox.
Also webbrowsers a use sandboxing for ages and split privileges between multiple processes but can still have critical security issues.
Even full blown VMs sometimes have issues that allow escape to the hypervisor.
I still really like sandboxing and I’m not a huge fan of antivirus solutions, just saying it’s not a magic bullet.
I did only say that I thought sandboxing was “a big part of the solution.”