I read a bunch of stuff on the various levels of security of #Linux packaging formats, whether it’s Flatpak, snaps, AppImages, or native packages.

There seem to be a lot of confusion on app verification and what it truly means, on the sandbox, on the role of a package maintainer for a distribution, so I decided to bust a few myths:

https://youtu.be/xw3NxIWpylc

BUSTING some packaging format MYTHS! App verification, sandbox, package maintainers...

YouTube

@thelinuxEXP On Youtube there’s this comment: “Flatpak is safer than AppImage, not sure about snap.”

Another thing is sure, on most non-Ubuntu systems Flatpak is more secure than Snap: see the paragraph on https://en.wikipedia.org/wiki/Snap_(software) which begins with “The Snap sandbox heavily relies on the AppArmor”. (Flatpak doesn’t have the problem because its sandboxing doesn’t rely on an LSM but on Bubblewrap.)

Snap (software) - Wikipedia