4 ms·
The sandboxing platform could offer an API so a sandboxed program can spawn a privileged file-open dialog, and then the sandboxed program is only allowed to mod
by AgentME 8y ago
The sandboxing platform could offer an API so a sandboxed program can spawn a privileged file-open dialog, and then the sandboxed program is only allowed to modify the file/directory that the user picked.
With the current situation, calling the programs sandboxed is completely misleading.
- audidude 8y agoYou've described the xdg-desktop-portal. Gtk apps just need to switch to GtkFileChooserNative and they get that for free. It does an FD pass of a FUSE fd and the app never gets file-system access. It also has the benefit of using the KDE file-chooser on KDE, Windows file-chooser on Windows, mac, etc...