On Sun, 01 Mar 2020 at 13:13:30 +0100, Laurent Bigonville wrote:
> libseccomp is not available on all architectures but flatpak has an
> inconditional build-dependency against it preventing it to build
> everywhere.
> 
> Shouldn't flatpak package disable seccomp support on architectures where
> it's not available?

IMO no. Flatpak relies on seccomp to provide its intended security model,
and if porters want Flatpak on architectures that currently lack seccomp,
the right way to go about it is to provide seccomp, not to provide an
insecure version of Flatpak.

    smcv

Reply via email to