Namespaces and sandboxing

Ryan writes..

Hey Guys,

I love the show- been listening for a few years now and glad to see it keeping up the great quality over the various reboots. I also like the audio format. In the past i always DL’d the video but mostly just listened anyway and always felt like i might be missing something visual.


A few weeks ago you guys were talking about linux namespaces. It seemed to me from the discussion that one perfect use case for this would be sandboxing. Can you talk a bit about some of the ways we could use namespaces to sandbox applications on desktops and servers? Especially things that provide a broad attack surface such as web browsers and their plugins, but also any arbitrary code you may want to run but are a bit unclear of its provenance.

Keep up the great work!
Ryan