▲ 877 ▼ Me after Mozilla and Proton (i.imgflip.com) submitted 1 year ago by RmDebArc_5@sh.itjust.works to c/memes@lemmy.world 120 comments fedilink hide all child comments
[–] far_university190@feddit.org 0 points 1 year ago (1 child) Not for firefox, critical firefox security feature not available in flatpak: https://bugzilla.mozilla.org/show_bug.cgi?id=1756236 permalink fedilink source parent hideshow 2 child comments replies: [–] gamer@lemm.ee 1 point 1 year ago This is FUD. It definitely is not a "critical" security feature. Firefox flatpak can't currently do its own internal sandboxing of subprocesses via namespaces, but it does do seccomp bpf filtering. That's in addition to the standard sandboxing of flatpak itself, which is implemented using namespaces anyways. If you are extra paranoid, you can tweak the flatpak's permissions to harden the sandboxing via your distro's flatpak settings app. permalink fedilink source parent
[–] gamer@lemm.ee 1 point 1 year ago This is FUD. It definitely is not a "critical" security feature. Firefox flatpak can't currently do its own internal sandboxing of subprocesses via namespaces, but it does do seccomp bpf filtering. That's in addition to the standard sandboxing of flatpak itself, which is implemented using namespaces anyways. If you are extra paranoid, you can tweak the flatpak's permissions to harden the sandboxing via your distro's flatpak settings app. permalink fedilink source parent
