Although this has the advantage that snaps use less disk space, it also means some large applications start slower.
After installation, the snap is mounted by the host operating system and decompressed on the fly when the files are used. This metadata is interpreted by snapd to set up an appropriately shaped secure sandbox for that application. This filesystem contains the application, libraries it depends on, and declarative metadata. The snap file format is a single compressed filesystem using the SquashFS format with the extension.
Result of command `snap list`: we see installed Skype and IntelliJ IDEA This is unlike traditional Linux package management approaches, which require specifically adapted packages for each Linux distribution. Snaps are self-contained packages that work across a range of Linux distributions. Although the Snap sandbox reduces the impact of a malicious app, Canonical recommends users only install Snaps from publishers trusted by the user. When this issue was found, Canonical removed the applications from the Snap Store and transferred ownership of the Snaps to a trusted third-party which re-published the Snaps without the miner present.
In one case in May 2018, two applications by the same developer were found to contain a cryptocurrency miner which ran in the background during application execution. However, the scan does not catch all issues. All apps uploaded to the Snap Store undergo automatic testing, including a malware scan. The Snap Store allows developers to publish their snap-packaged applications.
0 kommentar(er)
