Hi! Here's an interesting article about firefox sandboxing improvements on Linux:
https://www.morbo.org/2018/05/linux-sandboxing-improvements-in_10.html We already support chroot(2). Are user namespaces (http://man7.org/linux/man-pages/man7/user_namespaces.7.html - looks like capabilities) something that would be good to have for NetBSD? Cheers, Thomas