At the moment, there aren't many software applications available in this package format. It remains to be seen whether Snap will catch on, or if the Ubuntu faithful would stick with.
#Xquartz ubuntu install#
"Users can install a Snap without having to worry whether it will have an impact on their other applications or their system," Ries said in that earlier blog post. The idea is that application owners can push out updates to users faster. In cases where applications use different versions of the same library, these kinds of atomic packages are handy because there's no chance of applications breaking when the library version is changed. When the application is updated, the changes stay within the package, so the rest of the operating system and other applications are not impacted by the updates. Snap's security advantage comes from the fact that the application is packaged with all of its dependencies. Ubuntu Server is typically used without a display server, so the latest contretemps doesn't apply to server setups. Canonical and other Linux distributions have been working on Wayland, which is not yet ready for prime time, and Mir, used in mobile for the time being, most Ubuntu users are still on X11. X11 is currently the default display server of the Ubuntu 16.04 LTS (Xenial Xerus) operating system.
#Xquartz ubuntu full#
Garrett is correct in noting that Canonical is being disingenuous here Snap applications are not fully sandboxed because Snap has full access to any other X11 application. "The security mechanisms in snap packages allow us to open up the platform for much faster iteration across all of our flavours as snap applications are isolated from the rest of the system," Olli Ries, head of Canonical's Ubuntu client platform products and releases, wrote in an earlier post.
In the lead-up to the distribution's release, Canonical claimed that Snap applications are isolated from the rest of the operating system. Desktops, by their very nature, are a lot less secure: Install packages at your own risk. It goes right back to being careful when downloading unknown binaries or executing commands from the Internet. Snap doesn't change X11's trust model, so the fact that applications can see what other applications are doing isn't a weakness in the new package format, but rather X11's. The security risk isn't from Snap packages, but from the fact that X11 is insecure - how X11 trusts applications is a well-known security risk. "An application that has no access to any of your private data can wait until your session is idle, open an unconfined terminal, and then use curl to send your data to a remote site," Garrett warned. Matthew Garrett, a well-known Linux kernel contributor and a security developer at CoreOS, took a swipe at Ubuntu Snap in a blog post Thursday, saying, "Any Snap package you install is completely capable of copying all your private data to wherever it wants with very little difficulty." He claimed that installing Snap packages while using X11 display server was insecure, and he put together a proof-of-concept showing how a benign-looking application can log keystrokes typed into a totally different application (in this case, Firefox). There is already a claim that Snap can be circumvented on Ubuntu, but the truth is a little more complex.
0 kommentar(er)
