Files
flatpak/common
Alexander Larsson 23ec4eda2f Use new --disable-userns bubblewrap feature when possible
This feature (added in https://github.com/containers/bubblewrap/pull/488)
allows us to improve the guarantees of disallowing the sandbox to use
recursive user namespaces (which is a security risk) compared to the
existing limits that use seccomp.

[smcv: Move this to flatpak_run_setup_base_argv() so it will apply
equally in apply_extra_data() and `flatpak build`; make the compile-time
check for a setuid bwrap into a runtime check]

Co-authored-by: Simon McVittie <smcv@collabora.com>
Signed-off-by: Simon McVittie <smcv@collabora.com>
2023-03-24 13:29:32 +00:00
..
2019-02-25 18:12:30 +00:00
2021-02-09 09:36:59 +01:00
2018-05-24 11:59:52 +00:00
2018-10-08 08:36:23 +00:00
2022-10-24 16:12:14 +01:00
2022-10-24 16:12:14 +01:00
2019-04-08 12:50:42 +00:00