aboutsummaryrefslogtreecommitdiff

VirtualBox Wrapper

Wrapper to provide easy to use GUI isolation[1].

Xinput and clipboard isolation

VirtualBox offers some protections agains inherent insecurities on X server architecture[2] but not as tough as Qubes or maybe how Subgraph is planning.

It's still possible to sandbox applications using VirtualBox and have some level of protection while having a slightly simple setup if you can't migrate to Qubes:

  1. Clipboard sharing: you can entirelly disable this feature or have just the hability to copy content from the VM to the host X session.

  2. Xinput isolation: by my early testings, VirtualBox provides xinput isolation as the guest can just capture events when the guest window is focused. But this needs further research.

References: