Debian 13:

$ uname -r
6.12.88+deb13-amd64

$ snap debug sandbox-features|grep confinement
confinement-options:  classic devmode

$ snap debug confinement
partial

$ aa-enabled
Yes

Ubuntu (24.04):

$ uname -r
6.8.0-117-generic

$ snap debug sandbox-features|grep confinement
confinement-options:  classic devmode strict

$ snap debug confinement
strict

$ aa-enabled
Yes

What does this mean, you ask? Well, basically every Snap package you thought was running isolated in it’s own little sandbox were running unconfined the whole time. The prorpietary app you removed the :home connection from, so it wouldn’t be able to access your home directory? Well, it could have exfiltrated all our private files in the meantime.

How is this not a bigger deal and how are Snaps ever to become mainstream when even today, more than 10 years after the introduction of snaps, you can’t run them sandboxed on a huge portion of Linux distros?

  • makingStuffForFun@lemmy.ml
    3·
    3 hours ago

    Thank the gods. Nobody wants that proprietary walled garden in Debian.

    It’s just a tool for Ubuntu to control, and maybe even sell itself one day to Goog’s or MS or similar.

    Don’t want it in Debian.

  • pogmommy@lemmy.mlEnglish
    7·
    10 hours ago

    I mean I get the concern but I’d be surprised if even 1% of Debian users had any interest in running snaps

  • davel [he/him]@lemmy.mlEnglish
    16·
    14 hours ago

    Hardly anyone but Ubuntu users use snap, because snap was created by Ubuntu, and their efforts to get other distros to adopt it never gained traction. Debian users are especially uninterested in using snap, and some people on Debian are ex-Ubuntu users who switched because they didn’t like snap.

    • Slashme@lemmy.world
      2·
      2 hours ago

      Yeah, that tracks - I came back to Debian after a few years on Ubuntu, and even before I returned, I removed snap from my Ubuntu system.

  • Buffalox@lemmy.world
    5·
    12 hours ago

    Snaps is something you drink.
    AFAIK only users who have it shoved down their throat by Ubuntu use snap packages.

  • Rioting Pacifist@lemmy.world
    6·
    14 hours ago

    Because snaps is a Ubuntu thing, and not particularly widely used on Debian.

    #rank name inst vote old recent no-files

    2 util-linux 4000213 2110588 1172784 345252 371589

    2258 snapd 19307 17314 846 1033 114

    I actually don’t understand what use case snapd on Debian covers better than docker on Debian or snapd on ubuntu