Исходное сообщение
"Ubuntu ограничит доступ к user namespace" Отправлено Аноним, 11-Окт-23 01:51
В чём я не прав? Хоть бы аргументировали минусы, что ли. Мне всё равно, а окружающих в заблуждение вводите, господа эксперты. https://chromium.googlesource.com/chromium/src/+/HEAD/docs/l... > The namespace sandbox aims to replace the setuid sandbox. It has the advantage of not requiring a setuid binary. It's based on (unprivileged) user namespaces in the Linux kernel. It generally requires a kernel >= 3.10, although it may work with 3.8 if certain patches are backported. https://chromium.googlesource.com/chromium/src/+/HEAD/docs/l... > Linux distributions and Chrome OS (kernel >= 3.8) > Enabled by default (modern kernels) and actively developed https://www.electronjs.org/docs/latest/tutorial/sandbox > In Chromium, sandboxing is applied to most processes other than the main process. This includes renderer processes, as well as utility processes such as the audio service, the GPU service and the network service. > Sandboxed processes in Electron behave mostly in the same way as Chromium's do, but Electron has a few additional concepts to consider because it interfaces with Node.js. https://github.com/WebKit/WebKit/blob/main/Source/WebKit/UIP... > BUBBLEWRAP_SANDBOX

Ваше сообщение
Имя*:
EMail:	Для отправки ответов на email укажите знак ! перед адресом, например, !user@host.ru (!! - не показывать email). Более тонкая настройка отправки ответов производится в профиле зарегистрированного участника форума.
Заголовок*:
Сообщение*:	> В чём я не прав? Хоть бы аргументировали минусы, что ли. Мне > всё равно, а окружающих в заблуждение вводите, господа эксперты. > https://chromium.googlesource.com/chromium/src/+/HEAD/docs/linux/sandboxing.md#User-namespaces-sandbox >> The namespace sandbox aims to replace the setuid sandbox. It has the advantage of not requiring a setuid binary. It's based on (unprivileged) user namespaces in the Linux kernel. It generally requires a kernel >= 3.10, although it may work with 3.8 if certain patches are backported. > https://chromium.googlesource.com/chromium/src/+/HEAD/docs/linux/sandboxing.md#sandbox-types-summary >> Linux distributions and Chrome OS (kernel >= 3.8) >> Enabled by default (modern kernels) and actively developed > https://www.electronjs.org/docs/latest/tutorial/sandbox >> In Chromium, sandboxing is applied to most processes other than the main process. This includes renderer processes, as well as utility processes such as the audio service, the GPU service and the network service. >> Sandboxed processes in Electron behave mostly in the same way as Chromium's do, but Electron has a few additional concepts to consider because it interfaces with Node.js. > https://github.com/WebKit/WebKit/blob/main/Source/WebKit/UIProcess/Launcher/glib/ProcessLauncherGLib.cpp >> BUBBLEWRAP_SANDBOX
	Введите код, изображенный на картинке: