Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable sandbox mode #2100

Closed
posix4e opened this issue Sep 20, 2017 · 1 comment · May be fixed by qcif/data-curator#563
Closed

Enable sandbox mode #2100

posix4e opened this issue Sep 20, 2017 · 1 comment · May be fixed by qcif/data-curator#563

Comments

@posix4e
Copy link

posix4e commented Sep 20, 2017

The newest

  • Version:
    Of course! "electron-builder": "^19.28.4",

There's discussion at https://forum.snapcraft.io/t/snappy-and-users-and-groups-obsolete/331 on how to enable the snaps to access the sandbox which we need at brave
This allows things like browsers to use user namespaces in its sandbox <Snappy:Fix Released by jdstrand> https://launchpad.net/bugs/1586547
see https://github.com/snapcore/snapd/wiki/Interfaces#browser-support or use 'allow-sandbox: true'.

So the TLDR is we want both of them activated, enable-sandbox and browser-support, but not turned on by default
Major browser manufacturers may want to use.... Use of 'allow-sandbox' will require permission for distro in the public Snap Store at this time

@develar
Copy link
Member

develar commented Feb 1, 2018

Now you can use object with attributes instead of just plug name.

[
  {
    "browser-sandbox": {
      "interface": "browser-support",
      "allow-sandbox": true
    },
  },
  "another-simple-plug-name"
]

develar added a commit to develar/electron-builder that referenced this issue Feb 1, 2018
develar added a commit to develar/electron-builder that referenced this issue Feb 1, 2018
@develar develar closed this as completed in e488bfc Feb 2, 2018
vladimiry added a commit to vladimiry/ElectronMail that referenced this issue May 7, 2019
* The change disables the internal OS-level sandbox. So the app relies only on "strict" confinement for Snap and built-in isolation for AppImage.
* See electron/electron#17972
* TODO Snap: explore "allow-sandbox: true" plug, see:
  - https://forum.snapcraft.io/t/the-browser-support-interface/7775
  - https://docs.snapcraft.io/browser-support-interface
  - electron-userland/electron-builder#2100
devDefiWeb added a commit to devDefiWeb/electron-mail-app that referenced this issue May 28, 2022
* The change disables the internal OS-level sandbox. So the app relies only on "strict" confinement for Snap and built-in isolation for AppImage.
* See electron/electron#17972
* TODO Snap: explore "allow-sandbox: true" plug, see:
  - https://forum.snapcraft.io/t/the-browser-support-interface/7775
  - https://docs.snapcraft.io/browser-support-interface
  - electron-userland/electron-builder#2100
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants