+++
date    = "2026-08-08T14:28:59+00:00"
lastmod = "2026-08-08T14:28:59+00:00"
tags    = [ "linux" ]
+++

I think I told someone
[back when](/tdro/messages/systemd-sandboxing/#tdro-messages-systemd-sandboxing)
that the safest program might just be 'hello world' in the safest language of
your choosing. 

And that came out more like a joke, but there really was a
[note](https://wiki.archlinux.org/title/Systemd/Sandboxing#:~:text=achieve%20a%20near%20perfect%20score)
on how to achieve an almost perfect sandboxing score in `systemd`. The trick is
to not relax.