[ANNOUNCE] xdg-app - desktop app sandboxing system
alexl at redhat.com
Wed Jun 24 01:15:11 PDT 2015
xdg-app is a desktop and distribution-independent application bundling
and system for Linux. It uses user namespaces and the kernel container
technologies to run applications in a sandboxed environment without any
kind of root privileges or setuid required. It also features a user
-space dbus filter with policies that are compatible with kdbus.
xdg-app is still somewhat early in development, but it is now in a
state where it is stable enough to get a wider audience.
More details on how xdg-app works can be found here:
xdg-app recently moved to a new hosting service at freedesktop.org, so
these are the current resources for xdg-app:
Mailing list: http://lists.freedesktop.org/mailman/listinfo/xdg-app
IRC: #xdg-app on freenode
Bugzilla: https://bugs.freedesktop.org/ (product xdg-app)
To actually test xdg-app I have created upstream gnome and freedesktop
runtimes with some test apps, as well as an example repository with
runtime and apps based on fedora rawhide packages. See these blog posts
 Needs user namespaces in the kernel, if not available it can be
built to use setuid or setcaps instead.
Alexander Larsson Red Hat, Inc
alexl at redhat.com alexander.larsson at gmail.com
He's an impetuous playboy rock star with a robot buddy named Sparky.
She's a disco-crazy impetuous schoolgirl with her own daytime radio talk
show. They fight crime!
More information about the xdg