3 ms·
Installing Flatpak itself requires root, which means it's adding just a little more attack surface just to use Flatpak. Not a big concern of mine but I can unde
by kiwijamo 2y ago
Installing Flatpak itself requires root, which means it's adding just a little more attack surface just to use Flatpak. Not a big concern of mine but I can understand why some might prefer not to.
- hedora 2y agoAlso, until I hear otherwise, I’m assuming “the sandbox is still a lie” continues to hold: https://flatkill.org/2020/ https://flatkill.org/2020/ Though, that page says they at least try to make it not setuid root these days. Also relevant: https://xkcd.com/1200/ https://xkcd.com/1200/
- fph 2y agoInteresting read! But from what I understand from the permissions reported in https://flathub.org/apps/io.gitlab.librewolf-community https://flathub.org/apps/io.gitlab.librewolf-community , the Librewolf flatpak does not have access to the user home folder, which is the main security issue reported in that page.