4 ms·
It's mind boggling. The entire premise of being "sandboxed" means unable to escape the box and access the rest of the system. By that, one would think a Flatpak
by morganvachon 6y ago
It's mind boggling. The entire premise of being "sandboxed" means unable to escape the box and access the rest of the system. By that, one would think a Flatpak or any similar package would keep itself contained to the user's home directory, so that even if it broke out of the sandbox its path of destruction would be contained to the user's files (still not a great thing but not system-owning).
- wmf 6y agoWhere the app is installed and what it can access are separate things. Also, it's fairly easy to reinstall the OS but people are more concerned about their home directories being damaged or exfiltrated.
- biggestdecision 6y agoThe safety of your home directory relies on the integrity of the operating system.
- gridlockd 6y agoThe point is that if you run an app with FS access to your home directory, you are already screwed. OS integrity does not matter in that case.