Re: [Trisquel-users] Cinnamon DE on Trisquel

[dguthrie]

A sandbox stops some program from affecting the rest of the system. If you  
don't trust a process, such as JavaScript running in a web browser this is a  
good thing. There is even an OS called Qubes that runs instances of the Xen  
hypervisor to sandbox everything. Just looking at the makefile that is used  
to build it (by debpackage) might be prudent. It's already pretty secure: the  
Debian package builder tends to use a program called 'fakeroot' so that you  
don't need to run anything with elevated priveliges while building.