Bug#913116: Needs to depend on chromium-sandbox

2018-12-23 Thread Michael Gilbert
On Mon, Dec 17, 2018 at 4:40 AM Bastian Blank wrote: > > Since this can be used in place of chromium's setuid binary, my > > opinion is that the Depends relationship on chromium-sandbox is no > > longer required. > > Nope, at least if the package is supposed to work without admin > intervention. D

Bug#913116: Needs to depend on chromium-sandbox

2018-12-17 Thread Bastian Blank
On Mon, Dec 17, 2018 at 04:32:50AM -0500, Michael Gilbert wrote: > On Fri, Nov 16, 2018 at 4:30 AM Bastian Blank wrote: > > Debian does not support unprivileged user namespaces, so chromium needs > > to depend on -sandbox to get a working package. > The debian version of the kernel package provides

Bug#913116: Needs to depend on chromium-sandbox

2018-12-17 Thread Michael Gilbert
On Fri, Nov 16, 2018 at 4:30 AM Bastian Blank wrote: > Debian does not support unprivileged user namespaces, so chromium needs > to depend on -sandbox to get a working package. The debian version of the kernel package provides kernel.unprivileged_userns_clone as a runtime selectable option for a w

Bug#913116: Needs to depend on chromium-sandbox

2018-11-17 Thread Josh Triplett
On Sat, Nov 17, 2018 at 11:15:28AM +, Simon McVittie wrote: > On Fri, 16 Nov 2018 at 14:19:16 -0800, Josh Triplett wrote: > > On Fri, 16 Nov 2018 10:20:07 +0100 Bastian Blank wrote: > > > Debian does not support unprivileged user namespaces, so chromium needs > > > to depend on -sandbox to get

Bug#913116: Needs to depend on chromium-sandbox

2018-11-17 Thread Simon McVittie
On Fri, 16 Nov 2018 at 14:19:16 -0800, Josh Triplett wrote: > On Fri, 16 Nov 2018 10:20:07 +0100 Bastian Blank wrote: > > Debian does not support unprivileged user namespaces, so chromium needs > > to depend on -sandbox to get a working package. > > Should we, perhaps, support unprivileged user n

Bug#913116: Needs to depend on chromium-sandbox

2018-11-16 Thread Josh Triplett
On Fri, 16 Nov 2018 10:20:07 +0100 Bastian Blank wrote: > Debian does not support unprivileged user namespaces, so chromium needs > to depend on -sandbox to get a working package. Should we, perhaps, support unprivileged user namespaces? Or, at least, a means of granting targeted permission to us

Bug#913116: Needs to depend on chromium-sandbox

2018-11-16 Thread Bastian Blank
Control: reopen -1 Debian does not support unprivileged user namespaces, so chromium needs to depend on -sandbox to get a working package. Re-opening, as recommends are not enough. Regards, Bastian for kernel team -- A woman should have compassion. -- Kirk, "Catspaw", stardate