3 ms·
Why does snap-confine need to be setuid, rather than use a user namespace?
by thayne 7mo ago
Why does snap-confine need to be setuid, rather than use a user namespace?
- curt15 7mo agoSnap supports programs running as real root. Would those work with user namespaces?
- cello305 7mo ago[dead]
- zyga 7mo agoThere are several reasons but at some point we can use user namespaces to remove them. I'm not particularly a HN person so I won't go into details but it's possible to drop the setuid bits sooner rather than later.