4 ms·
I’m a little behind the times on Snaps, as I mostly don’t interact with Ubuntu via its stock UI. But I’m seeing other users complain about the lack of signing /
by peatmoss 8y ago
I’m a little behind the times on Snaps, as I mostly don’t interact with Ubuntu via its stock UI. But I’m seeing other users complain about the lack of signing / verified publishers in the (proprietary?) Snap store.
Thoughts on the tradeoffs here? How sandboxed are these apps? Clearly I’ve got some reading to do.
- freeone3000 8y agoThey're sandboxed with AppArmor, which allows restriction to rwx. Checking an app's permissions profile can tell you what it's allowed to read and write. It's like SELinux, but instead of capabilities, it's a list of files. (But everything* on linux is a file*, so that's probably good enough?)
- kyrofa 8y agoThere is other tech involved as well, such as seccomp to disable certain syscalls (e.g. networking).