Re:Flatpak: A security nightmare – two years later
by hedora on Friday October 02, 2020 @11:28AM
(#24663606)
Docker dynamically links; you don’t need to recompile the world to update a docker image. You just regenerate the docker image.
[ Parent
| on HN ]
Re:Flatpak: A security nightmare – two years later
by 013a on Friday October 02, 2020 @11:34AM
(#24663684)
It can dynamically link within the container, but as far as I know the container as a whole does not dynamically link with the outside world. Its effectively a chroot with a full system image inside that root filesystem.
And that's what we're talking about, effectively; how self-contained and sandboxed the package itself is.