même si certaines choses m'échappent, tout est intéressant dans cet article.
Concernant les navigateurs en particulier, que faut-il comprendre de
One thing that has been a bit of a pain point, Wick said, is that nested sandboxing does not work in Flatpak. For instance, an application cannot use Bubblewrap inside Flatpak. Many applications, such as web browsers, make heavy use of sandboxing.
They really like to put their tabs into their own sandboxes because it turns out that if one of those tabs is running some code that manages to exploit and break out of the process there, at least it's contained and doesn't spread to the rest of the browser.
What Flatpak does instead, currently, is to have a kind of side sandbox that applications can call to and spawn another Flatpak instance that can be restricted even further. ""So, in that sense, that is a solution to the problem, but it is also kind of fragile"." There have been issues with this approach for quite a while, he said, but no one knows quite how to solve them.
Est-ce qu'un navigateur web est moins sécurisé en flatpak qu'en paquet de distribution ?
# Super intéressant
Posté par antistress (site web personnel) . En réponse au lien Le futur de Flatpak. Évalué à 6.
même si certaines choses m'échappent, tout est intéressant dans cet article.
Concernant les navigateurs en particulier, que faut-il comprendre de
Est-ce qu'un navigateur web est moins sécurisé en flatpak qu'en paquet de distribution ?