54
Mozilla Now Offers an Official Firefox RPM Package for RPM-Based Linux Distros - 9to5Linux (9to5linux.com)
submitted 9 months ago by to c/firefox@lemmy.ml
3 comments fedilink hide all child comments
 

all 3 comments

sorted by: hot top controversial new old
[–] 1 point 9 months ago (2 children)

Fedora already has an rpm package for Firefox built by them, I think it's one version behind the latest. I'd like to be on the latest version but I'm unsure on the stability of this release. What do you all think?

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
    • 14 comments in c/linux@programming.dev view that post
    [–] 17 points 9 months ago (2 children)

    So uh... Why didn't they do this two decades ago?

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
    • [–] 12 points 9 months ago (8 children)

    Now that I use flatpak ...

  • permalink
  • fedilink
  • source
  • hideshow 8 child comments
    •
  • [–] 20 points 9 months ago (6 children)

    The Firefox Flatpak has much weaker isolation because the Flatpak sandbox interferes with the browser sandbox. This means a malicious site can compromise other sites and even the whole browser with a single exploit instead of the two normally required (which is a significant degradation in protection). The specific part blocked by Flatpak is user namespace sandboxing by Firefox. If you can help it, DO NOT install as Flatpak. Snap does not have this problem, but nobody likes Snap. Chromium has a similar problem as a Flatpak.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 2 points 9 months ago (2 children)

    Is this because everything runs as root inside Flatpak? Wouldn't it be possible to run as non-root inside Flatpak?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 9 points 9 months ago (1 child)

    No, nothing runs as root in a Flatpak. The problem is that Flatpak stops apps from using unprivileged user namespaces, which is used by all modern browsers to isolate web contents. Because the browser (Firefox) can't use namespaces, a malicious website can use a single exploit instead of needing to chain two separate exploits, making it significantly more likely to break the sandbox.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
    • [–] 6 points 9 months ago (1 child)

    Aside from nightly, I thought the repo release was up to date? I'm pretty sure its included in the default repo for Fedora.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] 6 points 9 months ago

    It is. Relatively so. This smells of Mozilla wanting to package things in there that Linux distro maintainers wouldn't package in themselves.

    You may say I'm being overtly cynical and as much as I love Firefox, I can't say I trust Mozilla's intentions

  • permalink
  • fedilink
  • source
  • parent
    • 3 comments in c/firefox@fedia.io view that post
    [–] 2 points 9 months ago (1 child)

    Seriously? After all this time?

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
    • [–] 1 point 9 months ago

    cool

  • permalink
  • fedilink
  • source
    •