Skip to content

Does running Firefox inside firejail provide the same level of isolation in comparison to a Virtual Machine? #4636

Closed Answered by rusty-snake
firejailaddssecuirty asked this question in Q&A
Discussion options

You must be logged in to vote

A VM has much more isolation then a sandbox like firejail or containers like docker.

Running firefox inside firejail will use the same basesystem, kernel, network namespace, hardware, ... while a VM will have it's on basesystem, kernel, network namespace and virtual hardware.

TL;DR: VMs have much more isolation and security at the cost of a much higher resource consumption and lower convenience.

Replies: 1 comment 2 replies

Comment options

You must be logged in to vote
2 replies
@firejailaddssecuirty
Comment options

@rusty-snake
Comment options

Answer selected by rusty-snake
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants