You are not logged in.
Hello everybody,
I'm new on arch but not in the linux world. I'm facing with this new situation for me (I always used Ubuntu since I was young) I installed ArchLinux with the hardened kernel and I'm trying to maintaining the stability and the security of the whole system. Now I need a few applications to work for my job, like skype, slack etc, and even if to install them on the system from the package manager I would install them from flatpak so I can split the system's applications (installed from pacman) and user's applications.
I read about flatpak installs by default the application on the system side but they will run into a sandbox environment, so this isn't a problem.
Now my problem occurred while I try to start an application, and the terminal says me to enable the unprivileged_usersn_clone flag.
I can run the applications of course by enabling the flag of course, but I would like to know if there is a way to use the applications without enabling this flag like installing them on the user space or doing something with the permissions etc...
Thanks a lot.
Offline
From https://fossies.org/linux/flatpak/README.md
If unprivileged user namespaces are not available, then Bubblewrap must be built as setuid root. This is believed to be safe, as it is designed to do this. Any build of Bubblewrap supports both unprivileged and setuid mode, you just need to set the setuid bit for it to change mode.
Take care though, not to enable both: https://github.com/containers/bubblewra … -rvxj-43vj
--
saint_abroad
Offline
From https://fossies.org/linux/flatpak/README.md
If unprivileged user namespaces are not available, then Bubblewrap must be built as setuid root. This is believed to be safe, as it is designed to do this. Any build of Bubblewrap supports both unprivileged and setuid mode, you just need to set the setuid bit for it to change mode.
Take care though, not to enable both: https://github.com/containers/bubblewra … -rvxj-43vj
Ok, I fix this issue... With the linux-hardened kernel, as I read here, I had to install bubblewrap-suid instead of the simple bubblewrap. Then, when I reboot my pc, the system was broke... I didn't understant why but the system seemed booted up well but the keyboard e the mouse didn't work so I had to run a live linux image, go in chroot, and with updating the system it installed the new kernel and then everything was ok !
Offline