26 Adamant Devlog 4
I have had a couple of people try Adamant on their machines and discovered that AppArmor interferes with the functioning of bwrap. It is mildly irritating, but AppArmor has a builtin profile for it. So using that profile fixes the issue.
probe has a mild usability problem. Yes, it works, but adding a manual entry to extra_ro is simpler if you know the dependency in advance.
Another issue I am grappling with is whether to stick to file-level resolution or move to folder-level. You come across this when dealing with something massive like Firefox. At some point, it is easier to map /usr/lib/firefox into the sandbox than the individual libraries.