System-wide sandboxing framework - sandbox-app-launcher

[Patrick]

@Patrick

What’s the security issue with dbus more specifically?

It’s mere existence increasing attack surface? I.e. even if running in a sandbox if any application parses untrusted input then there are more chances to exploit something in dbus?

…

In that case sandbox-app-launcher shouldn’t start dbus-launch unconditionally for all applications if these can run without?