3 ms·
high privilege access required (CAP/NET admin), containers / sandboxing wins once again. Can we make sandboxing the new default now? Flatpak does a good job, b
by himata4113 6mo ago
high privilege access required (CAP/NET admin), containers / sandboxing wins once again.
Can we make sandboxing the new default now? Flatpak does a good job, but we're still pretty far away for apt/yum/pacman installed packages. AppArmor was a decent step forward, but clearly not enough.
- pjmlp 6mo agoYes on Android, iDevices, macOS, Windows (UWP, Win32 boxing), Qube OS, but it remains a controversial topic in GNU/Linux land.
- soupbowl 6mo agoI am pretty sure that Flatpak does 'not' do a good job when it comes to sandboxing, maybe one day.
- himata4113 6mo agodoes it not? I know dbus is a problem that they can't really do much about except disabling it and wayland solved display based escalation.