Source: chromium
Version: 147.0.7727.137-1
Severity: normal

Hi!

It seems that since a while ago the SUID chromium sandbox hasn't been needed, according to upstream issues <https://issues.chromium.org/issues/40338793> and <https://issues.chromium.org/issues/40462640>.

Also, looking at <https://chromium.googlesource.com/chromium/src/+/main/sandbox/linux/README.md>, the setuid sandbox is just one of the three currently available implementations, with the other two ones being user namespaces and bpf, both supported by Debian's Linux kernel images.

So, unless we are missing something, we can drop the recommends and have one less setuid binary on our machines?

Bye!

Reply via email to