> all applications should strive to be properly sandboxed this way I agree, but definitely not this way! The sandboxing details must be 100% controlled by the

> all applications should strive to be properly sandboxed this way I agree, but definitely not this way! The sandboxing details must be 100% controlled by the user. The people who distribute the application should have no say whatsoever about their required permissions. That's ultimately for the user to decide. From the point of view of the application, all files are visible, but it may be a mock filesystem with mock resources. Letting the application distributors chose the permissions defeats the whole purpose of the sandboxing.