Исходное сообщение
"Ubuntu ограничит доступ к user namespace" Отправлено Аноним, 11-Окт-23 01:51
В чём я не прав? Хоть бы аргументировали минусы, что ли. Мне всё равно, а окружающих в заблуждение вводите, господа эксперты. https://chromium.googlesource.com/chromium/src/+/HEAD/docs/l... > The namespace sandbox aims to replace the setuid sandbox. It has the advantage of not requiring a setuid binary. It's based on (unprivileged) user namespaces in the Linux kernel. It generally requires a kernel >= 3.10, although it may work with 3.8 if certain patches are backported. https://chromium.googlesource.com/chromium/src/+/HEAD/docs/l... > Linux distributions and Chrome OS (kernel >= 3.8) > Enabled by default (modern kernels) and actively developed https://www.electronjs.org/docs/latest/tutorial/sandbox > In Chromium, sandboxing is applied to most processes other than the main process. This includes renderer processes, as well as utility processes such as the audio service, the GPU service and the network service. > Sandboxed processes in Electron behave mostly in the same way as Chromium's do, but Electron has a few additional concepts to consider because it interfaces with Node.js. https://github.com/WebKit/WebKit/blob/main/Source/WebKit/UIP... > BUBBLEWRAP_SANDBOX