|
|
|
|
|
by burglekutt
1028 days ago
|
|
There’s a lot of snap bashing in here, but one thing that seems really appealing is that snaps are run in sandboxes and protected by AppArmor profiles. I don’t know how good the implementation is, but sandboxing would seem to alleviate the risk that one of the hundreds of rando-authored packages that get installed on your system might decide to abuse root privileges during installation and quietly take over your system. Also, sandboxing your programs seems like a good idea in general, so they can’t all access each other’s data. |
|