XDG-APP and D

Joseph Rushton Wakeling via Digitalmars-d-announce digitalmars-d-announce at puremagic.com
Sat Apr 23 06:56:45 PDT 2016


On Saturday, 23 April 2016 at 11:29:29 UTC, NX wrote:
> I will just leave it here:
>
> http://www.zdnet.com/article/linux-expert-matthew-garrett-ubuntu-16-04s-new-snap-format-is-a-security-risk/

This is FUD.

There are no security risks with snappy packages that there 
aren't with any other existing Linux packaging systems.

Snappy actually improves things in various ways compared to most 
packaging formats, while not addressing the longstanding and 
universal issues with X11 that affect just about all Linux 
distros.

The solution of those issues lies either in setting up X11 to 
appropriately isolate applications (which AIUI is possible but 
not very nice to do), or using an alternative display server that 
addresses those security concerns (Mir or Wayland).

Ubuntu and Canonical have been completely up-front about the 
limitations of snappy's security guarantees when used on an X11 
system (well before Matthew Garrett wrote his article), so it's 
difficult to see these stories as anything other than a malicious 
attempt to undermine a competitor.


More information about the Digitalmars-d-announce mailing list