On Fri, Nov 16, 2018 at 4:30 AM Bastian Blank wrote: > Debian does not support unprivileged user namespaces, so chromium needs > to depend on -sandbox to get a working package.
The debian version of the kernel package provides kernel.unprivileged_userns_clone as a runtime selectable option for a while now. Since this can be used in place of chromium's setuid binary, my opinion is that the Depends relationship on chromium-sandbox is no longer required. Best wishes, Mike
