3 ms·
The sandbox is there for portability. I don't see a promise of being _more secure_ than other app distribution channels on linux anywhere. Though the packaging
by ricardobeat 8y ago
The sandbox is there for portability. I don't see a promise of being _more secure_ than other app distribution channels on linux anywhere. Though the packaging & sandboxing model certainly opens a path for improvements in the area.
Is it any less safe than installing something via aptitude or Ubuntu's app store?
- Shorel 8y agoThe alternative if using Ubuntu is called Snap. It has a sandbox and it is better implemented, at the very least the part about reading and writing in home dir.
- deleted 8y ago[deleted]
- MayeulC 8y agoAs far as I was told, snap sandboxing only works with a specially-patched (and apparmor-enabled) kernel [1], though I am not sure what the current status is. I would like to know what's better implemented in snap, it seems this is simply a case of most applications requesting a r/w permission in the home directory. It might get complicated sandboxing vs code without that, don't you think? Or at least lead to a subpar user experience. I am hopeful it will improve, though. Sandboxing needs to become the default. [1]: https://web.archive.org/web/20170615042616/https://github.com/snapcore/snapd/wiki/Distributions https://web.archive.org/web/20170615042616/https://github.co... Edit: Similar echo here https://news.ycombinator.com/item?id=18180877 https://news.ycombinator.com/item?id=18180877