2 ms·
The alternative if using Ubuntu is called Snap. It has a sandbox and it is better implemented, at the very least the part about reading and writing in home dir.
by Shorel 8y ago
The alternative if using Ubuntu is called Snap. It has a sandbox and it is better implemented, at the very least the part about reading and writing in home dir.
- deleted 8y ago[deleted]
- MayeulC 8y agoAs far as I was told, snap sandboxing only works with a specially-patched (and apparmor-enabled) kernel [1], though I am not sure what the current status is. I would like to know what's better implemented in snap, it seems this is simply a case of most applications requesting a r/w permission in the home directory. It might get complicated sandboxing vs code without that, don't you think? Or at least lead to a subpar user experience. I am hopeful it will improve, though. Sandboxing needs to become the default. [1]: https://web.archive.org/web/20170615042616/https://github.com/snapcore/snapd/wiki/Distributions https://web.archive.org/web/20170615042616/https://github.co... Edit: Similar echo here https://news.ycombinator.com/item?id=18180877 https://news.ycombinator.com/item?id=18180877