Hacker News new | ask | show | jobs
by burglekutt 1028 days ago
There’s a lot of snap bashing in here, but one thing that seems really appealing is that snaps are run in sandboxes and protected by AppArmor profiles. I don’t know how good the implementation is, but sandboxing would seem to alleviate the risk that one of the hundreds of rando-authored packages that get installed on your system might decide to abuse root privileges during installation and quietly take over your system. Also, sandboxing your programs seems like a good idea in general, so they can’t all access each other’s data.