diff --git a/usr/bin/sandbox-app-launcher b/usr/bin/sandbox-app-launcher index d8ece7f..f8150a7 100755 --- a/usr/bin/sandbox-app-launcher +++ b/usr/bin/sandbox-app-launcher @@ -74,7 +74,6 @@ setup() { run_program() { ## TODO: X11 sandbox - not needed if we switch to wayland - ## TODO: IPC namespace ## TODO: Network namespace - probably via ip netns ## TODO: Don't preserve the environment - env -i @@ -143,6 +142,7 @@ run_program() { --unsetenv SUDO_COMMAND \ --unsetenv OLDPWD \ --unsetenv MAIL \ + --unshare-ipc \ --unshare-pid \ --unshare-cgroup \ --unshare-uts \