![]() ![]() Having said all that, I do use flatpaks for certain apps, but I tend to trust them less then distro packages. But even if it breaks, you would not be using an insecure app.Īlso, flatpaks make it very easy for developers to deliberately ship outdated libraries, just out of convenience so that they do not need to adapt their app to a changed library interface. In a regular rpm package this library would likely have been independently updated by the system and the app would either be secure or break because of incompatibilities with the new version of the library. So the flatpak might stay with an old library with known security vulnerabilities for an extended amount of time. The issue with flatpaks are developers who update their flatpak whenever they have a new version, but don’t update it every time that a library used by their app is updated. It can contribute to critical security issues and system instability.įlatpaks have the possibility to issue quick updates if well maintained, but the same goes for rpm and deb packages. Overall, we have different package managers to solve different needs and it’s important we change the default behavior of installing all our packages with sudo permissions. The same applies to Snap and Flatpak, but I tend to associate those more with graphical apps. In regards to Homebrew, having a package manager that’s not dependent on your distribution means you can have all your packages share the same version and availability between different distributions. This can be essential for things like browsers when a new 0 day is discovered. Snaps and Flatpaks allow for apps to have scoped permissions, which is something we’re severely lacking in Linux, as well as a faster source for new application updates. For example, they can be slower to update when packaged by your distribution, and third-party repositories open up security risks since these package types are always given sudo permissions. Rpm and deb packages are good for a lot of things, but aren’t ideal for everything.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |