1 post
A sandbox controls what code can do, not what code is. When qBittorrent escaped confinement, provenance was the control that was never applied.