To read more about Flatpak security system, please check https://blogs.gnome.org/alexl/ https://blogs.gnome.org/alexl/: https://blogs.gnome.org/alexl/2017/01/2

To read more about Flatpak security system, please check https://blogs.gnome.org/alexl/ https://blogs.gnome.org/alexl/: https://blogs.gnome.org/alexl/2017/01/24/the-flatpak-security-model-part-3-the-long-game/ https://blogs.gnome.org/alexl/2017/01/24/the-flatpak-securit... https://blogs.gnome.org/alexl/2017/01/20/the-flatpak-security-model-part-2-who-needs-sandboxing-anyway/ https://blogs.gnome.org/alexl/2017/01/20/the-flatpak-securit... https://blogs.gnome.org/alexl/2017/01/18/the-flatpak-security-model-part-1-the-basics/ https://blogs.gnome.org/alexl/2017/01/18/the-flatpak-securit... Flatpak supports Portals. So it can be restrictive, then on a toolkit level it'll automatically allow certain things based upon user interaction. E.g. it'll securely allow a user to select a file. Therefore the sandboxed app gets access to that file. Practically, because some things are on a toolkit level sandboxing can take a bit longer. E.g. 'gimp' uses gtk+2.x, I'm guessing (though no clue), that the Portal is only for gtk+3.something. If you cannot nicely sandbox then meanwhile there's only one solution: almost no sandbox (e.g. still have access to the home directory.. which gives way too many options to break the sandbox).