Comment

Comment by burglekutt

There’s a lot of snap bashing in here, but one thing that seems really appealing is that snaps are run in sandboxes and protected by AppArmor profiles. I don’t know how good the implementation is, but sandboxing would seem to alleviate the risk that one of the hundreds of rando-authored packages that get installed on your system might decide to abuse root privileges during installation and quietly take over your system. Also, sandboxing your programs seems like a good idea in general, so they can’t all access each other’s data.
parent burglekutt 3 years ago

No comments yet

Be the first to share your thoughts.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton