3 ms·

Why would you rather install some random rpm from someone you don't know as opposed to a flatpak?

• oleg_antonyan 5y ago
  This works both ways: Why would you rather install some random flatpak from someone you don't know as opposed to a rpm? The trust is outside of the scope of package managers
  • zohch 5y ago
    Because installing an rpm allows you to run arbitrary code as root. Installing a flatpak does not. I mean there are many more reasons but that should be en.
    • oleg_antonyan 5y ago
      It's explained in the article, security section: b/c installing flatpak can also run arbitrary code as a user. And I won't argue that running malicious code as a user is always harmless. Regardless of root access if you're installing flatpak and its author want to pwn you - they can do it even without root access
      • cromka 5y ago
        Yeah, so why even have user accounts and not just root everything? I mean if there's no difference...