firejail is a sandbox to restrict the application environment.
Please contribute. Task:
- play around with firejail in Whoinx
- see how it goes
- report (and possibly fix) issues upstream in firejail
- test the Tor Browser firejail profile, consider packaging it
- maintain firejail profiles in Whonix
This is a volunteer position.
Whonix firejail / seccomp development discussion: