Hello all you masters of the technology,
It is a long time I use the concept of sandboxing, while having only a vague idea of what it represents. Today I dare ask the question.
In order to get the concept, I compare it to (rootless of course) docker/podman containers. They use the resources of the OS, have a screen interface (like some kind of port 80) and can communicate with other apps (through some kind of port dedicated to inter-process communications). They can be granted "capabilities" through setting privileges.
For those of you who understand sandboxing and the containers, is that a correct representation ? And what would be the major differences ?