Debian 13:

$ uname -r
6.12.88+deb13-amd64

$ snap debug sandbox-features|grep confinement
confinement-options:  classic devmode

$ snap debug confinement
partial

$ aa-enabled
Yes

Ubuntu (24.04):

$ uname -r
6.8.0-117-generic

$ snap debug sandbox-features|grep confinement
confinement-options:  classic devmode strict

$ snap debug confinement
strict

$ aa-enabled
Yes

What does this mean, you ask? Well, basically every Snap package you thought was running isolated in it’s own little sandbox were running unconfined the whole time. The prorpietary app you removed the :home connection from, so it wouldn’t be able to access your home directory? Well, it could have exfiltrated all our private files in the meantime.

How is this not a bigger deal and how are Snaps ever to become mainstream when even today, more than 10 years after the introduction of snaps, you can’t run them sandboxed on a huge portion of Linux distros?

  • chronicledmonocle@lemmy.world
    1·
    5 months ago

    Who TF cares? If you want containerized apps, run Flatpak. There is no application packaged for Snap that I’ve not seen packaged for Flatpak, too. And Flatpak is better in basically every way.

  • davel@lemmy.mlEnglish
    1·
    5 months ago

    Hardly anyone but Ubuntu users use snap, because snap was created by Ubuntu, and their efforts to get other distros to adopt it never gained traction. Debian users are especially uninterested in using snap, and some people on Debian are ex-Ubuntu users who switched because they didn’t like snap.

  • lagoon8622@sh.itjust.worksEnglish
    1·
    5 months ago

    What is this, troll day? Nobody cares about snap bc none of us use it. It’s a colossal fuckup and nobody cares about it

  • hendrik@palaver.p3x.deEnglish
    1·
    5 months ago

    If I had to guess, this isn’t a bigger issue because Snap is mostly pushed by Canonical. And in a bit of a weird way (proprietary backend, exclusive apps) so… reception in the rest of the Linux community is …mixed. To put it charitably. It’s probably not that relevant for most people outside of the Ubuntu ecosystem. And probably also not a priority for Canonical or the proprietary software vendors.

  • makingStuffForFun@lemmy.ml
    0·
    5 months ago

    Thank the gods. Nobody wants that proprietary walled garden in Debian.

    It’s just a tool for Ubuntu to control, and maybe even sell itself one day to Goog’s or MS or similar.

    Don’t want it in Debian.

      • Mike@sh.itjust.works
        2·
        5 months ago

        Last time I checked the Snap Store was proprietary. While you could modify the Snap client, you can’t host your own store and you’re at the whims of Canonical for which apps you can get.

        Meanwhile, both the Flatpak client and server are open, and you could (and some distros do) host your own repo. For example, Fedora has its own repo for Fedora-packaged Flatpak apps alongside Flathub.